awzesxdcrfvgthbyjnkml[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

awzesxdcrfvgthbyjnkml.exe
Size

39KB
MD5

f0f128022a86732d78b3046990ff726b
SHA1

cd900d74ce125e5a74f8733eca8fba7a109c43c0
SHA256

d34e237550ff1f35888d416a4db4f41e6fc464adf168be7ae66204395e3e1f25
SHA512

0eab8d5d57b29fc44636e3476dc1e3ba5db440262cff84066c33d6975eb3d8838b9f01425168a4dbe78bd11331b45368fc42b807c8fa13b645fda10a14cf93bd
SSDEEP

768:VvA49Ed4inYCPoNym1zXwwbUMGoiSFChK7j9U6xmZxiX8kkl9U2iKPP90Zn:iVn34X1zxbUMGoiOChK7jCAilu2FPlyn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
awzesxdcrfvgthbyjnkml.exe

Files

awzesxdcrfvgthbyjnkml.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ