688964_20-02[.]exe | Triage

Sharing

General

Target

688964_20-02.exe
Size

652KB
MD5

da25cf713d669d0f6216e57c83919d21
SHA1

e67b3e35896774a6492fbb01e3cb816384514e8e
SHA256

a14ee08ede7c94fd96d00a1e583eb9dde0179d494cc4f607a32b0861639a4e30
SHA512

4c3a284b4a97df4b31ccb1866ba150a927d10f58cd8b12a24a1cc24508d7ed42d6fd29c0d2faa53e0f86fb134092a8f3a255c0b55c0bdbca9061d713b63f6b45
SSDEEP

12288:o5iPPoWPnoUecO3fztm/l7W9giFTR9Vndpd1XIK2gcwpI/q3XHMeq42DONJ0R0Mc:6i4WPnYRElK9gi9VndpjiLwpIZs2WCOH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
688964_20-02.exe

Files

688964_20-02.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

JQkc.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 649KB - Virtual size: 649KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ