rNXdHMKUBicAKCtSnXOfMQI6Y[.]exe | Triage

Resubmissions

17/02/2024, 15:35

240217-s1b6nsgg89 3

17/02/2024, 15:34

240217-szsf9sgg84 3

Sharing

Copy URL Twitter E-mail

General

Target

rNXdHMKUBicAKCtSnXOfMQI6Y.exe
Size

229KB
MD5

56220d621b646e5f4317fc612603f5c2
SHA1

315ac6536328fff80917ae12369437255a059c88
SHA256

26fdb7b08205bf5a9d61fdc297ef72082edfdbdf493ce39c5b5152081e02576c
SHA512

a7bfd8c4f22c91f93e268f8d05c7fedde7548425ce5ddabe4bcf36293261d7734fe87c3312e4f36c0567c2228376866a76530c589566257147c25c1812adc31d
SSDEEP

3072:IdzJq3fL400Ryj7m+kH0hDnSi+yGIET3f1+sWn5REULklA5okuTfCPRjWOmeEgdL:ZB0Ym+FhDnP+ybA1+s4RolA9RaPoFRe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rNXdHMKUBicAKCtSnXOfMQI6Y.exe

Files

rNXdHMKUBicAKCtSnXOfMQI6Y.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

....
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

....
Size: 225KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE