StartupU8[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

StartupU8.exe
Size

8KB
MD5

89a1f003003ca5bc08b68773ea790789
SHA1

591572669a084636e7f1b79c8f32c86b8fb54bb3
SHA256

464bccafb5360494db7eab3897f19279fe7b945e59892359eb73bbac77a64b2e
SHA512

c6f9f07ab7d0cbc2f765b6cf052f6d9fefe35ccacc9de0332cc6a4c527bbe6cdc4c47182ccb5883838d8173c9e2836fc3fbfde94ce22dfece57e62ecfc19b385
SSDEEP

96:mciNUib6y92PYq3dViGMNIOd9RPCW+LkLk8dFMv7WuxcMmsjp7/LLoM5DM+gM5M0:WUe6GwB5aIWPPCzLkLaxAgHt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
StartupU8.exe

Files

StartupU8.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ