dg[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dg.exe
Size

25KB
MD5

3bf6984c6e128b509d7c6fa17dcbee60
SHA1

aaaa5d4528a11505ee0b864cb9cff0a5da80bf0a
SHA256

25af8f8e6a6cfc0a4478b53e0d75097cc9ecf2569d08c61b55f9441bfe4c0842
SHA512

afeee64a816f24eeb0b7f8debeda5370dbb671d0d3a3326eddbec1011a896b8b6b43c2502c5375318516099248f85594410541f8ca67f86d2807567c8a1525f0
SSDEEP

384:PEKld/HS5Zs1f1cPb3n6h24F5jUy+UUdQA1QMmM9sCP4UP2KkxMRd0dd17Xg9lFq:sKLHSLadcj3nOBiUexcJCP4G2Ky9MnE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dg.exe

Files

dg.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ