113994036[.]exe | Triage

Resubmissions

09/07/2024, 21:13

240709-z2twfawdkn 7

09/07/2024, 20:58

240709-zsaffaxbna 7

Sharing

Copy URL Twitter E-mail

General

Target

113994036.exe
Size

7.6MB
MD5

eb7c1f5a3275376f1085e40367607914
SHA1

0804f073ef43ca29a978caf0a8ad33b6686e6023
SHA256

5ec7d458fec41eb1ec403110ef00af462b00f71254122dcf8260c37ade7e2704
SHA512

832d69deae315bd1126dbe99dab8a63f054d1bd096b35afc7943163f32efd8c77167cb6f9dd91cb39d53f0aaa320db6dad06092b7599738352733be7ccba4c3c
SSDEEP

98304:FB4WCR1zJpte4lqNvZV9xipkfbOnOPlYdEwuBCMbBOJcrkDW7Ac9+aFy+SOWgnfa:FfCXJpte4QNhV9x5OnqRHlyDWE2lnQX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
113994036.exe

Files

113994036.exe
.exe windows:4 windows x86 arch:x86

28a39463c54ac73ec6c510ff668c831f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

ValidateRect

advapi32

RegisterEventSourceA

comctl32

PropertySheet

shell32

ShellAboutW

mscoree

_CorExeMain

Sections

.bss
Size: - Virtual size: 11.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.didata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CRT
Size: 103KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE