0VOthsKNyb3X9Og[.]exe | Triage

Sharing

General

Target

0VOthsKNyb3X9Og.exe
Size

770KB
MD5

5f947fd44e2d6440c3c33f672afdaf53
SHA1

d856fcf4695690d9100ad49fdb7dc1145b1a7644
SHA256

3baf8d1cf9b649c7c802c1cfa6eed29fd4b285ba47f5d35b2c862907f2f736ec
SHA512

3c85ac082e6c9c83d0c187c51e14b13776f750b3a64374887766224f34b5ec7217f81652d7d674e1319a353b7fc420eb9467e7ea0c0efc55c7362060d5bd315c
SSDEEP

12288:NHo4SS5+1X8fKJdN9PoXgkq0loawju8JPEmSsW0zV/hTb:NHZd+1X8ifN9PoXg0GndFEmbWm/f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0VOthsKNyb3X9Og.exe

Files

0VOthsKNyb3X9Og.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 767KB - Virtual size: 767KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ