nKn1jzmAenyHT92[.]exe | Triage

Sharing

General

Target

nKn1jzmAenyHT92.exe
Size

828KB
MD5

aed6990e101cf3ebf90d9cceee4db5d5
SHA1

a1d07a30918449778c8a6ae453c2093a3dfce1c3
SHA256

21532995df294a6cc55a4a14c22d08556ae4cec8e393b98b2950579a6a61f079
SHA512

477e96d56e7a3bd642d16199ce3b5df5197e11e245ff7621e29d58f2f2e7559832ef672f5b2ca6a9cb18c26e257a027b664b48e305ee9078f4139a1e65eea173
SSDEEP

12288:+D14GB65SGH8jW/VnewDTyPXeilloVVpo87Ma0c4ViHS+yA2OqpWItQ:k2SVmewDkFliHo87MJL2u3EW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
nKn1jzmAenyHT92.exe

Files

nKn1jzmAenyHT92.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 808KB - Virtual size: 805KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ