HmGUCvTQIacWu7Q[.]exe | Triage

Sharing

General

Target

HmGUCvTQIacWu7Q.exe
Size

1007KB
MD5

ff1d0766297fb6e6aad3dc1008559378
SHA1

73feaee0551ae5e811933319cfdaf0bb4d8b457b
SHA256

5411cdb506aeb34244854a919278dd88877f92e0a97561aa50d11d8b0dfb86b8
SHA512

942b328054d8e10576fe716d6eb32148b4ca656944dc057b232e190ba241495a450e5cff706d0f3083d44a2de9e70f4ee7349b2678af0f959a0338b7c95a2f8a
SSDEEP

24576:A2llb+23cUxsRq4pyzJXYiZYsPrKIhICqnML:PllL2zMJ5K0IB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HmGUCvTQIacWu7Q.exe

Files

HmGUCvTQIacWu7Q.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

AwBiy.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1005KB - Virtual size: 1004KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ