I_love_you[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

I_love_you.exe
Size

805KB
MD5

c17f8779381f03eada352332342ca234
SHA1

6b3c4ac07d1eca83c87fd1a4621007d5fc6b0ae3
SHA256

2ae0b594750bdafaeba0dcd72683b2adfb03c8af34fc584c5ab43efb664175c9
SHA512

f50028269db675399648d970353bcaec3dd1862245466018753bd88ab2751ec3a0d49f106d3d9d24293f4d60fee3e8e7e6e794c33ced7d54609b1001fbef1aae
SSDEEP

12288:2jJ7PNWwPjrapOKHlXywR40FxdnqTALrBYftQpu7ylRYyq2tIhgPKXRHu1f:2zJPKNC/0FaA3BNp77lt+CsCf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
I_love_you.exe

Files

I_love_you.exe
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 89KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 211KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE