DTR Image_capture 27082024 JPEG FILE[.]exe | Triage

Sharing

General

Target

DTR Image_capture 27082024 JPEG FILE.exe
Size

95KB
MD5

7142e3f8717ceba4d68dcb63c2feeeb5
SHA1

799ad49c02f6639c40b346cf0901fdb2faacec45
SHA256

157868c8f84471c8e30e35b2ab3534747a57759c4ed5cbc9d28be6017f2ce683
SHA512

abfe5c9762d2cf3290ae9ca3ccf713ee51c89e351d8663d40d9154a79f390bd816411ce2b4d73eedc10183ced9e22809a2a8afdc8231709e85a6f3950d6cefbb
SSDEEP

1536:nb0aq7PCHc1ppkI4PnMbm01IpZM3CEF/7GmqbMY7usiY9hkF:b0/ZJ0MCYII7GmCMY7pdkF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DTR Image_capture 27082024 JPEG FILE.exe

Files

DTR Image_capture 27082024 JPEG FILE.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

WEWFGHCS76.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ