Guna-Test_Robusted[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Guna-Test_Robusted.exe
Size

80KB
MD5

8cccf466f4fa044633fba26dbec1a7e1
SHA1

441de57b322f32c3f435d3ce5955961a16164d4c
SHA256

22bd6addd070e1508a2ec3b3e83aca6561334d412eb8fbe05825c729150ca88b
SHA512

60f31b062334d7938330fdf14b6cea7d74f832bbf3b7c777f55856098c972c7529b881e41d9758aa5cd1c886c3b1b223868d1586fac95c59cb4c70975cb65273
SSDEEP

1536:q2CngzwbvUQYZY53UYQe5q35T0AYTIh7TgwBzFnT:jCgzwTUQLJsOA5o1mgw7T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Guna-Test_Robusted.exe

Files

Guna-Test_Robusted.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ