2024 expedition_Health insurance_evacuation[.]exe | Triage

Resubmissions

03/02/2024, 16:52

240203-vdj9wagcaq 10

03/02/2024, 16:49

240203-vbnvaagbep 10

Sharing

Copy URL Twitter E-mail

General

Target

2024 expedition_Health insurance_evacuation.exe
Size

208KB
MD5

a63c6d7e0cb36f748aa151907676c88c
SHA1

dea67d328a3a2636c9972b977565b26ef773248e
SHA256

3592d42bcd4e637e9f179e9a6a1ed0a7200bd3b5ee52f8c498eac7b837daa318
SHA512

6f041b59067927ade7f1ee66e6e1252b02eb8be18d54390c8195e242be7acb91046dcbd1fa79aa662fd2f4e4bad2045aafbf87e48bf34dffe2b594583dbafd64
SSDEEP

6144:fWdFMIXq8WXnIYvGtbZe+s+m/MxSKRsD:f4MIXqlnrGtVe+s+mop+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024 expedition_Health insurance_evacuation.exe

Files

2024 expedition_Health insurance_evacuation.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ