a542d970968b57ab4173cd039ddb1fd3cc0ff5e7090b45d412ca0f43df52de4c[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a542d970968b57ab4173cd039ddb1fd3cc0ff5e7090b45d412ca0f43df52de4c.exe
Size

6.4MB
MD5

48e1ff235a82d5a77c00ade2b99ebf1d
SHA1

a7e42e82ebdc4eda70decb2d3c1a17865fbdec95
SHA256

a542d970968b57ab4173cd039ddb1fd3cc0ff5e7090b45d412ca0f43df52de4c
SHA512

04a82223e60aa4fef63e02e190c33020e7d3aac30d583f50eaa78fe3126d60b9eb536a58b8815db10592c75751c374ff46172049025b442f6fdcea85a5468bc3
SSDEEP

98304:jnKnUP2Gld7Rot26+IfWB2X7gtqGK6hVKscAN9g+pHH2OeFupKBXCZwKk+Q6Zmg6:zDDVirWjKWZ3g4dhZwH+QwmN9ukKEKO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a542d970968b57ab4173cd039ddb1fd3cc0ff5e7090b45d412ca0f43df52de4c.exe

Files

a542d970968b57ab4173cd039ddb1fd3cc0ff5e7090b45d412ca0f43df52de4c.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\wengk\2022\KKdesktop\定制\SiMayRemoteMonitorOS- Mirror 2024420\SiMay.RemoteService.Loader\obj\Debug\lsase.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.4MB - Virtual size: 6.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ