fkMHDIXtU6FFM6s[.]exe | Triage

Sharing

General

Target

fkMHDIXtU6FFM6s.exe
Size

1.1MB
MD5

a5021ff0a8aa0e540e1706ee9fdbbec8
SHA1

9bf459636dd6b99af8d5367bb11ceb92cc7a22c2
SHA256

4a16bbae60032e06b51bb15167a7371ff5373340c05e131e86c795e0e00b7a62
SHA512

43475358f31f7a384dd836ac8c70a1f85bf6d736aa6c15ae837df5b189429ffe3ef8cbc7b9759d7b7596557f9bbb77dc905bdb13ba0566c51f7cbe56b5a4da13
SSDEEP

24576:8qX7O6EbB6e/IRrRT+jUalAMdDDms8IfEjYnC0cOMugK7Br:8qq6EMe/IJW2Md2sTfEs6jugYBr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fkMHDIXtU6FFM6s.exe

Files

fkMHDIXtU6FFM6s.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

OUqz.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ