B289DYUAW[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

B289DYUAW.exe
Size

3.0MB
MD5

aba6cfda43df486946bc31b4f63ebd09
SHA1

b126b7bdf51958424504a24982f3814c4fdb0ead
SHA256

36bd2de9bcc7388c624e154e2696f7a7286811925e30033d233ea3be396a861f
SHA512

06ea60c4469e9cf77102f4b15e73aa93cc0f62a63e046c872d285349bdabae809180e1a8a495f3f92090da8a2be40464afe02182e409d4f7a5d374d48c746dc1
SSDEEP

49152:6nsHyjtk2MYC5GDEITYbNbNWo4kSH3OqtwIq+qR21rDOkM6S+:6nsmtk2abIT4bNJFY3Oqt++qRkH+6R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
B289DYUAW.exe

Files

B289DYUAW.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 615KB - Virtual size: 614KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ