R8RWQKkTyhpVJb3[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

R8RWQKkTyhpVJb3.exe
Size

691KB
MD5

1b3a11cb3b606bdf619f83da873c4e12
SHA1

1db99f93ab9c52d6181e6d30cf632224216c0aba
SHA256

11c488706f2502a2986347e9d0103d2e03994315a22540db5ce5c2236a169b62
SHA512

1414d1d6a6ca728abc6dadc797bbb9f652bf77e4e3cc53c12dc8e15022bcba1c7a3584829c7bb09f4c3fbf28c032c23145f4ad7f887020c5c2f3cd5406ff44dd
SSDEEP

12288:9ws/XP5Ujd53Llvj72sjOo6tXJtkSQoBVrbXFwJ/yrss2DN4zlHC:HBK1isaoGTT1wU72x4zlHC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
R8RWQKkTyhpVJb3.exe

Files

R8RWQKkTyhpVJb3.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

JTnI.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 689KB - Virtual size: 688KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ