0060ee7f8a52809313c3260b33925bd0N[.]exe | Triage

Sharing

General

Target

0060ee7f8a52809313c3260b33925bd0N.exe
Size

1.1MB
MD5

0060ee7f8a52809313c3260b33925bd0
SHA1

c0d5af3e23f64cacc4c92ffb7dc1837a488147e9
SHA256

a36612c59995d2e04ce8b2b8d581b966173264fcfc15028605bd4c86dcb74eda
SHA512

06acafe756c57f0b774e574b27507ea2db70a1cbd0fc98f3d510b3a5c9b753878f72a0edf7c32a59299d7bb612a8f368a945d364e3617bb59fe19c2c932a721e
SSDEEP

24576:8Y4FnELnz3SQQqtTs2+GPCkoNZF5tHfqqSvqqwIfPn3An/T1ZTWmAXSZ:8xELziQ5tAXKsXftHiqtqfP3cRZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0060ee7f8a52809313c3260b33925bd0N.exe

Files

0060ee7f8a52809313c3260b33925bd0N.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\God\Documents\Visual Studio 2010\Projects\klme\Release\winserv1.pdb

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 888KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE