ET2431000075 & ET2431000076[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ET2431000075 & ET2431000076.exe
Size

763KB
MD5

c392c7b013dd78b12473a04d82e9fa1b
SHA1

4ab43b699ffdb27f93856e43b12bcd0d89070157
SHA256

09f202dbceb944c631fc597c7b929d3885d3a44faa9d0f8d332d13d593a9ca84
SHA512

5a0716ab9c2c61dc7a8ad50650ca861c46459da0f252828c85144a70017c2b8d332e8ddd6b126e8c69dfbbf0af4777010d7aebe3bde57be0b371ac0f91441311
SSDEEP

12288:+OgbUeoUbvwby+YYNtHRHnV1JD4nt/QEkiu+t7MJd4++eju3NdsSs2GAaGZe0:uVublNDHnV1xnEkiuXdnxju3NdsSnGGT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ET2431000075 & ET2431000076.exe

Files

ET2431000075 & ET2431000076.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

BJwt.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 761KB - Virtual size: 760KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ