2zA63r22hAWM5UI[.]exe | Triage

Sharing

General

Target

2zA63r22hAWM5UI.exe
Size

703KB
MD5

ef0553ac375ae94690ad68ef346638d6
SHA1

f8e5b6b15b184ba083e5159831ff2b4fb2c76e8b
SHA256

15f10b6a24a0c33910edf61a2df7845da559cd92876b07c195ed022b03f6dc16
SHA512

c958538f1744c59e0122f94771d3a2362a5a1966cef9c7af8c5e59e6c33fc4a54535e52b82e79c4318ed9e419b0f750e801597a373b3c52c1ba17e577047c5ae
SSDEEP

12288:rSFO2iN3skSKSIwMP90sIA+uDl2b9jLG4YDbDbQKaj40qWSLOy+RN/reOZu4uWlz:rSA19JSNIdV0RAPopjLo3za0USLEreyx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2zA63r22hAWM5UI.exe

Files

2zA63r22hAWM5UI.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ELBE.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 700KB - Virtual size: 699KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ