2grgy3y6jrg3wukm[.]exe | Triage

Sharing

General

Target

2grgy3y6jrg3wukm.exe
Size

355KB
MD5

f672573076be6adf52f01be16c98a617
SHA1

8256d393ed127a5a36fa5c2dbafb472042472926
SHA256

2bdb3f27fa13a84c45e5cd5e3214259b64b31152005f5b68177b745dac0a8dbf
SHA512

c746b0a1099401e9e38dd8b3d80f0f6676076a14ab09b6697cbdc11d28bc57fe82273587d2ccd0e6fe1de58510f60933eb884a22bad25538d29f877c4b6be7b5
SSDEEP

6144:Bbsdx3DeNWZeN7Jz+WTDY2JpX9/vCRDDhHcPN4+TPiSbjF5tkCHHCe:gx3Dew8RCcPN4+TTPZHC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2grgy3y6jrg3wukm.exe

Files

2grgy3y6jrg3wukm.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 353KB - Virtual size: 352KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ