94908526[.]exe | Triage

Sharing

General

Target

94908526.exe
Size

589KB
MD5

356822a07569942ea8b5a2b092b3a70a
SHA1

bb058bf7944951ae73f5dc8eb3487f2ad0928334
SHA256

a159bd480f79fa31be7221debd26ef015e4ad69efed117d9b2892554c73f57f0
SHA512

4a29883712247a0839cbbdb37cf3cb6292ee37dfe95efa529dbcbee90e112c6c537afce90a3f23f8b35baa6b5dbf0b730c047ca0f1a8074ccc0f6d6e4e82950d
SSDEEP

12288:c7HbI+4WpAEYy7q0p6RdA6ZMFmMDYE49ZUI045J8cFyzm86TM4FG+:WpAE1oRdA6ZMFLo9ZUI04L8ZNk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

94908526.exe

Files

94908526.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 573KB - Virtual size: 572KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ