serial取得ローダー_Slayed[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

serial取得ローダー_Slayed.exe
Size

183KB
MD5

a0f0895959fb7189b32f52e40e5164b7
SHA1

665423dad9a45154184b5ccb7559c1bd786a14ca
SHA256

3df73234c98c7e859d531df4000dd4f7584c52869799d283c2919fa616d46c41
SHA512

9fa81648adb30bd4e50f93a8cc6343bb382bd9509ae6192224f45faaaa8a34fb006a78d557931e7cd1c117fc74b6b57e95ade901a182859be4452b0781a11620
SSDEEP

3072:tEJX/7p5OzDriII3iBQkFDXqweTeyoe3L7FJ6FZbwQL5dE4CpLHCECoP:C5uD2IEiBxhXd8d2nL38LHvC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
serial取得ローダー_Slayed.exe

Files

serial取得ローダー_Slayed.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ