123123[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

123123.exe
Size

326KB
MD5

e1ca19c2e8c3195f57ece803115a4d37
SHA1

1972a5772e0bdb82391fbe40e686d006f103fd22
SHA256

2d97519124caee20f2a88f0bad232aa101067531f2656c30732e9be163331251
SHA512

258e375f9ff2e7bd8670090791b85bca06582c67ab9e35b7e2068434e5af714711781e1f24262d7efee600d219f6cea2971178f6eec0405c017eb3c1e89d849c
SSDEEP

6144:lcEDZxutQlEuGT7Ybe6VlWT8b9l/C9cvDsgPbJjeL:lDutvujbPVle8TVs+je

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
123123.exe

Files

123123.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 323KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ