363779e7fcbbe8fffa8e21244d3738eb712b6328ba268f8eb41d0788982f0398[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

363779e7fcbbe8fffa8e21244d3738eb712b6328ba268f8eb41d0788982f0398.exe
Size

484KB
MD5

29e66bbee8ab9a2db00020792b2fdff0
SHA1

be890044b1e3583051c2ba5492b1c4cecc440616
SHA256

363779e7fcbbe8fffa8e21244d3738eb712b6328ba268f8eb41d0788982f0398
SHA512

8f3dbf358260da6ae7644f7a37d24d3be32ea4bf131eade9f666dbe0bcc8daa3696ca137bfb4980717c85a819c4c3bf1499a9d25064487cf68cc306ff8966e54
SSDEEP

12288:BgJJD9HstCLJDzxyc2gJJD9HstQLJDzxygl:BA9W0FzxyzA9W+FzxyE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
363779e7fcbbe8fffa8e21244d3738eb712b6328ba268f8eb41d0788982f0398.exe

Files

363779e7fcbbe8fffa8e21244d3738eb712b6328ba268f8eb41d0788982f0398.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\puri\Desktop\Arise DEV\KMZPatcher\KMZPatcher\obj\Release\KMZPatcher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 281KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 202KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ