30146e4cd5f8f77bfdca092892bfd717[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30146e4cd5f8f77bfdca092892bfd717.exe
Size

16KB
MD5

30146e4cd5f8f77bfdca092892bfd717
SHA1

3ecd61b4c80bc59d673dd6b4893ba0ef911c7b82
SHA256

aaa7eef32b229318697246953917f110d298ac23a08212f52d62b0865194b155
SHA512

90998c48084af3986b69d48ab392cc831dd6be1b394f290d5a7349b7033edd80bb46f2fcc94bd1970c7fc90f495eb5e5c809a3b09745baa0d2821995abc2466d
SSDEEP

192:qXduKMslu3LtJ2zTQQb/qWaz/5wOCPfbINFwxj2otK068t0RUIfn:qXoT2zOz/5wOCLINqp2oSVfn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30146e4cd5f8f77bfdca092892bfd717.exe

Files

30146e4cd5f8f77bfdca092892bfd717.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\GGWS\GGWSUpdate\obj\Release\GGWSUpdate.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ