phapshxn_xml_hash[.]exe_ | Triage

Sharing

Copy URL Twitter E-mail

General

Target

phapshxn_xml_hash.exe_
Size

24KB
MD5

5c13bf6aa48bcc591ffdb66b0f42d9f2
SHA1

03229d7def6a4163aad9e6214aa8994f7bf9ea8a
SHA256

639c13d4bdc49c14c51e0e01fb1fa213b1e13c040393c51c04a7b979a67880f4
SHA512

d568e88c857226d7deaea2aa074a0fa9f08ee683f6fb94fca02ae4d39475956cde8866c44dc76448d6ed76ec2f1527a6439def0ef71a6d312861d1db0ee91101
SSDEEP

768:PNirsQZ9d0rlckP12Qs2ualu5SvbISh5glimrab0H5w0/BIqd+PBqJqXOe1HNl:PNSsQZvSEL2ualu5SvbISh5glimrab0q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
phapshxn_xml_hash.exe_

Files

phapshxn_xml_hash.exe_
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ