66b09f01e0030_dozkey[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66b09f01e0030_dozkey.exe
Size

4.0MB
MD5

e66c202fc9367708b37d5ed10975bfa8
SHA1

090ce59f7507b732b36b74e14dbbbef662d2157a
SHA256

fa565ec0da19b4c700bf3705101bd49c9c09aaf26691abb6fe1c3622926cc8d2
SHA512

91c0bace672cbabbf7b8dc7b5b50e996592f177b3fa03be6cc2f558bc1132377188b13e1aebc5930a294c950711de378ee23534175b84c09b5bad91b6ff3bb19
SSDEEP

49152:OJeWnnSndfDmDeyev3jh2iB/rcipCNweSNP0r5hHqtCavMvBVRZsp1u68wA4:OJVnnSnVDmDey/0g/Kca0ZVQp4sA4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66b09f01e0030_dozkey.exe

Files

66b09f01e0030_dozkey.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

marcetsoft.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ