SXGd5qsYxlVNvNi5[.]exe | Triage

Sharing

General

Target

SXGd5qsYxlVNvNi5.exe
Size

1.3MB
MD5

f19cd680ff3a86ed893a4843d90a9c72
SHA1

d9165db28b535f4e8b839ec36f7387144ab58b4a
SHA256

a9844699fea45fcb973b994551d29298f7826efdfc40cc230b71964462ef989c
SHA512

61f6c7ce8e4dfbea6473952e61c0f35f6a1723ac943ca732080e72733d2756b1290a7f0cac850fb35a5c19a569900cc1561cc249042e228e92e7ea9d25f49bed
SSDEEP

24576:QnD0S6256pc/tN5rUwtY0LUwsX9KZRG0vMss9JSFiPt0QEwcMs3ZWV5W/S1E+ri1:7g5Wc/t3/tYpR9K3vMdGiPt0HRpWV5Pk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SXGd5qsYxlVNvNi5.exe

Files

SXGd5qsYxlVNvNi5.exe
.exe windows:6 windows x64 arch:x64

6b8fd782e0693913ba9f1f20e16c9423

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

PeekMessageA

kernel32

GetModuleHandleA

shell32

SHGetDiskFreeSpaceExW

advapi32

RegCloseKey

Sections

.pexe
Size: - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pexe
Size: - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE