1L62NY9ZQMprumk[.]exe | Triage

Sharing

General

Target

1L62NY9ZQMprumk.exe
Size

667KB
MD5

ae7e54f55f6e95d58a3d93e879106e62
SHA1

b74ddaa43e3e0d3d5a004ec17ddcfa3469e6c63b
SHA256

888714e20e0e1ea31a87ed8e975ea7dae65744d65870a52336146f40b2b07433
SHA512

9931541d4b0b7cad262fdf6f175d7f02107b1508b3fd82dd54deae157c10b47b1c2b5616708978a08238e266549ce6a7d094244f96b1a251685a4dd418cf671c
SSDEEP

12288:Z8P6RtKY7QS6OCwVOWoldEsM3puQbVWvXfrNcAvnvgcKsWWT:Z/QS6OCHXnEsM+JcAvnvYsWW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1L62NY9ZQMprumk.exe

Files

1L62NY9ZQMprumk.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 656KB - Virtual size: 655KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ