Vsl particulars Packing list[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Vsl particulars Packing list.exe
Size

667KB
MD5

da58c0799f42e068c33eeb7989669b07
SHA1

795944e8b149d10ef89e1724272f0b6f8dd38505
SHA256

7a6f6272e04ce76806e72e5e40260af3ef99411a25d5dded22b2e72b6971b7a3
SHA512

c554e88c725281374bc80120eaabb494a62aaff2fea329c689236eb775f82b1423d383d1ac609d09c1fa9b084a43416d74e3ef1b19735983bd1f5b168fef1fbe
SSDEEP

12288:CYydfwXs3lR2BJpOWtCs58hr9bZwZbG173x1nX:C3t3zq3RtCXbubAx1n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Vsl particulars Packing list.exe

Files

Vsl particulars Packing list.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 665KB - Virtual size: 664KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ