t1ak3RoG8rTBjAZ[.]exe | Triage

Sharing

General

Target

t1ak3RoG8rTBjAZ.exe
Size

691KB
MD5

eec74e980b1cf69f08733a78f3dcbdda
SHA1

3eca126ba38e3646832d6cf82e172a93b48b6540
SHA256

e227a85a5032fc9bd30142dd3ad831b3955eb6860460b16d5a2d7dfc478d0540
SHA512

4797c3f30759ea8a324ab00382f702b1355e9ac167784037c34b93c500a67b45510d3b1a721bd8e4320e0734469b5ea76973ab320690542760243dbb5582b315
SSDEEP

12288:t2iNzeWFm+QpTQGDDZT/t2t1KEVYa97hUCDKc9DrFo5:t1tRFm+c8G/rkYaVD9DrW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
t1ak3RoG8rTBjAZ.exe

Files

t1ak3RoG8rTBjAZ.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Zmyj.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 688KB - Virtual size: 688KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ