aqm1pj0o[.]ort[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aqm1pj0o.ort.exe
Size

30KB
MD5

8d3654692946c6a03f6c1f11870b87c2
SHA1

b0ec284f580dbcde42658fe8a4c2090926e1d6a1
SHA256

53c1b438ad13a3fa4a03233da4104e3e3f163e94f241a52fefa5a8a3a45e796f
SHA512

a291cf8dd15d416e9f9ce1b88d804feeee2a2c8ed4413a2b25a2a476e088317ece201c85ed851e5f8f532e00e66ed00c95a8f5476900b418b414790851154581
SSDEEP

384:3W9pxAvFEcg9MvfWCtw71ZIV8uMAjDulJzfxEDTlSDZj0j94PI7j7nyffqF15hgf:m9QEc+cDTlSZg94PI7j7rNhY6UHQi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aqm1pj0o.ort.exe

Files

aqm1pj0o.ort.exe
.exe windows:4 windows x86 arch:x86

Password: 546456

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ