62ea1714df6e4881115283af0ba32f9197b4febfb2a33ba873a3b20959882db9[.]exe | Triage

Sharing

General

Target

62ea1714df6e4881115283af0ba32f9197b4febfb2a33ba873a3b20959882db9.exe
Size

5KB
MD5

384eda50c009ce07c5a1eef3ffe25ef0
SHA1

59bce5b134c0ee8e2f559464de091b7645d8f78b
SHA256

62ea1714df6e4881115283af0ba32f9197b4febfb2a33ba873a3b20959882db9
SHA512

efc78b6de5c96607cf3b6f26097bb1a745ee3205afc6beb70cd63e6ff8b1921aecd78e73e4c30fcd5fc4438d94efda324f446cd1239a49616d572298b996a02f
SSDEEP

48:6xoMZ8upXYh2aifeBzCfylM8rcgXYMDfmivzawf48FHXHtPNXGIu4tMkRlXDHLr6:EIh2a7hMXgmivzasXHtZGolb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
62ea1714df6e4881115283af0ba32f9197b4febfb2a33ba873a3b20959882db9.exe

Files

62ea1714df6e4881115283af0ba32f9197b4febfb2a33ba873a3b20959882db9.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Work\kozy\src\Kozy.Embed\obj\Release\Kozy.Embed.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ