hgu8iog[.]7zö8o[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

hgu8iog.7zö8o.exe
Size

5.1MB
MD5

4770702992b96976893bd6c34b7a5c30
SHA1

eeb9067c9359efb63fef4ef52cf98e40db31a1d0
SHA256

07449a58d44e7f2559572c77e51fd37843902e6d6945701a6b798bc014408f09
SHA512

f310f73f9c083f5d4685ed9c77a7f8810514d5f6056aee76d6c0496e77de993829749e9754b05bded2906d572b7b9d33cad4e16e5eaf09647e7df1b2eb93a4db
SSDEEP

98304:uNJGJqJqJqJ799//t3uHRfYHexIu5uStSEbWM+tJ7Lrw3K6X:cJGJqJqJqJb//t3ux+e+8uvbNtJLst

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
hgu8iog.7zö8o.exe

Files

hgu8iog.7zö8o.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\vaylo\OneDrive\Desktop\Razor software\Colour_GUI\obj\x64\Debug\NovaPrivate.pdb

Sections

.text
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ