MV TNYK TBN 1 - VSL'S SPEC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MV TNYK TBN 1 - VSL'S SPEC.exe
Size

720KB
MD5

40fb0c718118f2e57554ed6ac3baeb9d
SHA1

edb470ece953a6b5799cf51bba7fd12b2833d99b
SHA256

93bc53ac6666ec7e8baed9fe226b218b6508260a82ffd3fcd923f7f5b556593f
SHA512

eeb17e760b449fb4cc1d48d824cf939f02b66ef51b23f7e5f369422fc05a4075fea42939d639ee50334fd41c5290550b6e04704fe87cc9a4737c7264b95ace71
SSDEEP

12288:ka1OIoIFFHgeg/cGf+rRB6npK6tp+abMLj/TOGy2r65ohzKnkB/iD5H4:uIXFxGW1+btAiMn7Ok6vnkB/W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MV TNYK TBN 1 - VSL'S SPEC.exe

Files

MV TNYK TBN 1 - VSL'S SPEC.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

JtEq.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 708KB - Virtual size: 705KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ