DisneyFy_p[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DisneyFy_p.exe
Size

2.1MB
MD5

6f92ab859be9874a31019bc9e785330c
SHA1

18cd20e57efde86972cae2cdeb9462a3bb4eed18
SHA256

be9c84a3d908084fb8e5e947a302acdad688b916bac016988e2b767339b60648
SHA512

364a42c57aa525117d7822576d8d754dad145bd9743cc0bfa733134974b19c1b9cbc348967391ffd3c633f5fad95a54cc0b83e3987a059f81eb96b9a113a6a04
SSDEEP

24576:XdB2U08m657w6ZBLmkitKqBCjC0PDgM5AZFkm8CQ5HIxtxayYyKZRQ6IQG58h:XuVV1BCjByJQ5HGtJ+ZRJIQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DisneyFy_p.exe

Files

DisneyFy_p.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 230KB - Virtual size: 230KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.UBX0
Size: 1.1MB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.UBX1
Size: 624KB - Virtual size: 624KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE