S00989282313413[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

S00989282313413.exe
Size

630KB
MD5

9581d007a33277a7c16ac8b24d88f39c
SHA1

92c8200359aae93e8613be7229160e63e5aa40c5
SHA256

e73e3b7eb6cd581f436d7b1529005f177388a079a47c5dc51a7bf53da80f0b79
SHA512

d5f9c59dbd4cd4716ec26bf1d66eac9beed4266d32deea866ed0443b63f5eb137643a0b96d0b45d1fb93a1e24b0470b640bcc24ab150b55f759f7cd4e698014c
SSDEEP

12288:TVMcthmJnysjhFIkemUWGhbIofdrJuHYXyZyKC1JexZvDIW+VAFnS:ELE1zo+yZCiNcqS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
S00989282313413.exe

Files

S00989282313413.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 628KB - Virtual size: 627KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ