u1zBYqsipafStki[.]exe | Triage

Sharing

General

Target

u1zBYqsipafStki.exe
Size

848KB
MD5

0d3f3677ea8d45a57d725d61c71c172b
SHA1

be4ca1e7e6a23784efce031f83c0232141cd0718
SHA256

7c57d141f4c57d4ab30efd69206dc0a236ed915b2dbc437a9305b860e66e8a3c
SHA512

6b4fd4ac87b2d64881986dacf956a1aa3ec8e7cb351cc58d512e5b48c61a1ee5b2e69b264e4b8ec549211f5a29b35eb883e3e2cf79decd89467a07c069f36226
SSDEEP

12288:MaqvKgABiOX57dhpovj+6xuXvQDX7xRRVHZUvKeUtfysEa7ueH5qTIx:2OX5ZhSrXiQDFRRoZU5dEapq2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
u1zBYqsipafStki.exe

Files

u1zBYqsipafStki.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 683KB - Virtual size: 683KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ