HZbCDaqwtPi2zal[.]exe | Triage

Sharing

General

Target

HZbCDaqwtPi2zal.exe
Size

810.6MB
MD5

e755bcacbf899bd6e5c2367bf091c5d2
SHA1

2db2db6c4a6eb93f36e69f6fc78c54b83ba43c88
SHA256

5094852f033740dcb4569b76459d566fc4391c81d9257f50390c3289f4d1aa6a
SHA512

85e7001d7737fc0efc93b315b1fccb75ec27c54e07e2e7ae9d479bc47bf32b5c3b851e6bec5a9bf66e98af7b87c7b2363b62a6d1860ad9a5167c148a00211643
SSDEEP

12288:TlW3HmzBh35JcUAfBcjxUW9PzqUZGaPPBraBUQ0Ym:5BzrztUW1zNbPBraBUd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HZbCDaqwtPi2zal.exe

Files

HZbCDaqwtPi2zal.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 698KB - Virtual size: 698KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ