Соскальзывать[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Соскальзывать.exe
Size

647KB
MD5

8de46469d187c64e554c2973c2fbf0df
SHA1

c18d3ab7ab1762f4434c09446997cd60cfc21bdd
SHA256

99272a3cc1bc11b98374726b72dcde487c62b20c25128bf4cf3345fd07cb660e
SHA512

d59e16a882664708b18da578b431ea2916628bcc82bf357d697b3adbd41c19d6f2e5df93df7143925f4cefc04a629f2dc2b803d09bc4287191c2aa6cf01645cf
SSDEEP

12288:DjprYhkZ5wYYXiE1BtsBB5qdQGJBY2AFdqgVDR3iESiqX8sXzl7W3DJr:DjpkK/wFiXBuTjY2AFdq4R3i/iqRzlI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Соскальзывать.exe

Files

Соскальзывать.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 637KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ