c1OOZe5rus5eY9G9qTRMTtEum[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1OOZe5rus5eY9G9qTRMTtEum.exe
Size

209KB
MD5

68472a4a648e936039a793c3e53216e3
SHA1

b8264ed9ae3cab1d2bb11f707995a2fa521d72ab
SHA256

3466f05345af748e56ae70bb1483bad4fcb805a7e57e8c6e2583f8698af62cb2
SHA512

5e8df479db494356eb7acc21713533cf2f7bb6c97a0d3705c7b0761ef6987bb0c46bfce7c75e8f68b520605efa391bf5db661c02ea2d612c416c4464245e9bc8
SSDEEP

3072:RzEMrjTAsPYYi6TWMwQAo4eXA37FBY7CBqAsMedlQ+nbWJuuQlD5jOPlmhXgG1B:RzEMfT+sTWsA37yClsNnqlmBB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1OOZe5rus5eY9G9qTRMTtEum.exe

Files

c1OOZe5rus5eY9G9qTRMTtEum.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

....
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

....
Size: 206KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE