DonnyhubDecryptor[.]exe | Triage

Sharing

General

Target

DonnyhubDecryptor.exe
Size

559KB
MD5

f8f6edd76200dd4515271b2753c229b0
SHA1

1aed085439f970d177cf71fe60cf43e4223ba99a
SHA256

da7935d1b02e7e6c638c173c4fafa800b196a851185f9b92431d8697f133c9c9
SHA512

c3e3d3bc37796da527317a4b5d07876b530dd0a4b0a65606e50927deb3b92bd15f3e2d39ada9dc0c66dcdd799843c3019d14259a5219309622a1bfc126d5db3d
SSDEEP

12288:DO7FJJ7gIgVj2du42aSG7FLJ7gIZVj2du42a5:q7FJJMPRAu4fJ7FLJMyRAu4f5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DonnyhubDecryptor.exe

Files

DonnyhubDecryptor.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 282KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ