cnycij0e[.]exe | Triage

Sharing

General

Target

cnycij0e.exe
Size

5.3MB
MD5

1c39f676abf0dac55917e2e0d46a0a24
SHA1

58fe13b8da21b4bd38573378c3e1ab1f55a9dba8
SHA256

a136d9d00094ddc10951c9174dcb345d6a4f4d66b905ebc7ef7e140510fb1743
SHA512

6e8209ff5443eaba8c0686f1b65968df3dd629e0d53ce241667f5b87674bf81787317aa0e5310b773f3c63c9de76706abcf8da0a7d920f4116fe9481426f5572
SSDEEP

98304:wtVnhJyB+1r2oqgNhVRwPdmDDU2Jo2a+qRkHTWrFk094z9OUh:wtVhJ71CoqgRRwPdeo2JFskEe094

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cnycij0e.exe

Files

cnycij0e.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ