5179227 _928233837_82922726[.]exe | Triage

Sharing

General

Target

5179227 _928233837_82922726.exe
Size

935KB
MD5

1e3c53cab7ec31c5d5bb2fd4c84ae556
SHA1

6901f5ddae3e440786ede838f2f67e578d89f74f
SHA256

31bdc1cbcf58dae297131e9f07035d6d33211744187d60ba9272a7bf4c602b42
SHA512

685d4b6900462fd498f60e6ea6f602b6555e1d6c07d4f85cc290d57132df8ba6f3308e7b8f5d1b8f40fa19d549fe15e59be73f4de538c3e79354156752b68a82
SSDEEP

12288:XkZRz8UfY179W/gDcr+2yhqCGWnuG1wgeYOhlmdkzb:UZRzTY17qgDcr+2yhqCxnu87v4h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5179227 _928233837_82922726.exe

Files

5179227 _928233837_82922726.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

kSQb.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 917KB - Virtual size: 917KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ