Baltic questionnaire[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Baltic questionnaire.exe
Size

432KB
MD5

48382f79ecedd5b949b0457723c1d3fb
SHA1

b32ff2ce69d19adf6ee4a0e2d39d9babd30c41e8
SHA256

2265e43c3f91487219234a3fda76b7077a1a70c6ee3b4672a7281faf06475542
SHA512

714ea8161569555117733c54b54686ed9b88563c702a4f661ac1e19ad9e8daba974f5506667698925a7f84fcec440fea6371b8fd30b25ff33ca872d45f743050
SSDEEP

6144:HGGQjt12GhzFv9IeW7uH+w7NveNxjaEj5S/Z2SgyL4kQrkXDSJDRa4S2:mGQjuGhzFVUuH+wZvjm2HN4V0Q7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Baltic questionnaire.exe

Files

Baltic questionnaire.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 429KB - Virtual size: 429KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ