379131441_1441110189_72091628[.]exe | Triage

Sharing

General

Target

379131441_1441110189_72091628.exe
Size

1.2MB
MD5

08f0e3cfb99f1f51a6e03e32ebedd1a8
SHA1

085fc5800240a03a33c71e463babc357cb9519af
SHA256

e93008f8bd551aa37c8f586a269e745325f9a4e19fb54a6b21c6c2446af161b5
SHA512

9d111bf35b4205855eae878b1ff5444a27a0f71b6dd93d89b2d95f80fb34d0264ad8db20bf39d9d610d95861f295d5657ba9ad27181c6b0977e6ba5dff257a92
SSDEEP

24576:NQYU7LjJvkNRhM2o0bdQ2UwdX30tZ1jjC0SBetCafMOnsywUjbZn+rZEag:N/QvdL2o0RWwh3kZpjCStgUZn+ZEag

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
379131441_1441110189_72091628.exe

Files

379131441_1441110189_72091628.exe
.exe .ps1 windows:6 windows x64 arch:x64 polyglot

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

CLqWmnX|
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

]eGwT`JI
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

p{CgMwrh
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE