246609312[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

246609312.exe
Size

5.9MB
MD5

ee15cc807fcc6b4071d203b76848443b
SHA1

139ed13ad7823193a219b4eb86b960b06e9cba74
SHA256

0dc0fe39831f21d5071a0019a525ad5ec8008364314c42d52a9b76e78687ce48
SHA512

11702c2c01dfad2918ce43d45c6fdad8858f5280ac1027e77b399346f0bb51e3a889bd2385118b8966d1084e1fb1e057602b919d6fc6570784cacf2fb997425d
SSDEEP

98304:KW5pE+9onMXNDm7dAlcUsBHn5cFOzF/VBLV259PaNe4/wsr6t+T52fSRt:7DlDwdam15DzLlQCcHs1T0ut

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
246609312.exe

Files

246609312.exe
.exe windows:5 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 769B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 34B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ