r1210DEC-GIG[.]exe | Triage

Sharing

General

Target

r1210DEC-GIG.exe
Size

627KB
MD5

35092b310e4d2832d81b8f5d9ef1e094
SHA1

ec3a6137aedb5c7b056d51ce653f10c094a4ef14
SHA256

ed4ef6ea5bca41f50f9300b0c0527ff04a1bb54150202d6e357a92433bda46cf
SHA512

8739c9deac4df2c9b20e9f9207f600bfb83c364f3c1bcdd098e878a2ba3969de2c348c5084a3d772b03683dce4d240510822db280c2565735ecc4368328ec725
SSDEEP

12288:ApEmQepZshyxfbCErYeNWDUuZv7IgKM7Uvj5Z+62Tp1Lnly4hdw:ApE0bCcWDUynKM7H31Xy/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
r1210DEC-GIG.exe

Files

r1210DEC-GIG.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 622KB - Virtual size: 622KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ