h_1[.]8[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

h_1.8.exe
Size

1.1MB
MD5

ee3a1cbad92a7e995ce3e6d4d850d806
SHA1

25adb0aa7fcb0bc72f4f020374fa00e18627a4b9
SHA256

d1eba1474478f7f054b7e9ab842028c8ef51e851c8374d1c222d0a597f125971
SHA512

9697cbf754f1390469b35cda891a59d561825d6f5b482b7982bfe9ecc95413c95ef8b690561064716f74b658e9ff0b7bf2817dba8e54458fa7542deedb24c027
SSDEEP

24576:Zn5HY0upCvSTnpYqZEcmNXZaef6EzKBSfp5KF0NveiNYloId+Q:Zn5HxuUvKnm6EcmNpaLE63upeiNY/sQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
h_1.8.exe

Files

h_1.8.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ