INV[.]3175001503[.]exe | Triage

Sharing

General

Target

INV.3175001503.exe
Size

613KB
MD5

fca326ddaec93f996764280283e13ff6
SHA1

c1fd93944936ca86099bc20365295c96be975842
SHA256

fd62e09831ebcfa6b2fa8da868a3e6da9eac62580a7516633a8490bb6f7ea29f
SHA512

faa66593aed94623e8335c3b8293e953464ddf29595f6d6f02a787d5f9e52a1110ac0cfe41460af7bd6c48d1c5f202553d7ab22b83f1cc4b3ca5dccf37a00bc4
SSDEEP

12288:j5Fa5WOk38It4CQbEamjIqEAQrGI/P5Bch/wpbg2iQ7Kx0Jxn/:jVazzbEamMqEbvhBch8P7Gx0z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
INV.3175001503.exe

Files

INV.3175001503.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

HhKT.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 611KB - Virtual size: 610KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ