pernyataan saat ini[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

pernyataan saat ini.exe
Size

995KB
MD5

f617b8f9111ce50b1a498e33cecd8e6d
SHA1

291aaebc9ee4949148fae7e9a4c192378d68d41d
SHA256

6b9593f2ea021033eb5378992ae8ccd9f893e557a9006659f3a4e799a791a955
SHA512

3e3d73373f3010bc4cc2ed19d0cddc5406c9b14bbd418838465c2f5eebda14d714ae022735ca2ab44314dcdb79f8e83c8fd1734ab6a3f1160cdf113b6be63779
SSDEEP

12288:KHtKWOamKJBGHH7nCGBkjzPcKchHtmhSZnGnWBr3d53rD22J:KNK/abfGHH73BkjQ6hkGnWBrD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
pernyataan saat ini.exe

Files

pernyataan saat ini.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

tvgy.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 703KB - Virtual size: 702KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ