zelenskiyZOV[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

zelenskiyZOV.exe
Size

1.4MB
MD5

8377ac725081e9b5235f0281a915fcd3
SHA1

a110afbae1e1d1bb6af31327d3340f8959e68e40
SHA256

a3e91d0f065c87842d8576724c2b1dc13f9e4ae7384ad942420f177836416114
SHA512

0135af9f9b87de35ba39012a01a2911a2afccc8e8ffa8c8fd1364e1f1b9fcfdd1addd5799bfd0385c553b422dc41507f6bbba4b962bc4820e7b3c2db07b9871f
SSDEEP

24576:Bi3DJ41FCzvmmYyy5N0zZjhByM/fOO8gAGaO23mCKXnN3Izuli/K:qoCmoZjhB3/mO8gAq1CSn9I6li/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
zelenskiyZOV.exe

Files

zelenskiyZOV.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ