viYHsSZ[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

viYHsSZ.exe
Size

194KB
MD5

37cf936b91267363186126ca9825b2bb
SHA1

8028a50535558519ce29f87ddfd07a2c0ea422f7
SHA256

7190b3e6e63d8aac304793b5123d67b574166fa707e3428dafd879d2ab8a566b
SHA512

69e56c6e0a5418a58bb05de5bb61261937e0edaaed86671e0106f70f4029cf5d0767f06112a12794d058f37b87ce8df894d63b1bb77e42197a0cfbbdca49f9c4
SSDEEP

1536:NwVyIScMzkQkIshv1YAJnab55L1VkqIpteH:Nw3Sc5IY19Bad5L1V3IpteH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
viYHsSZ.exe

Files

viYHsSZ.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\main\documents\projects\projects\gdiTest\gdiTest\gdiTest\obj\Debug\sleep.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ