608329_IGHaI[.]exe | Triage

Resubmissions

01/09/2024, 07:04

240901-hv2t2avelg 3

Sharing

Copy URL Twitter E-mail

General

Target

608329_IGHaI.exe
Size

23.6MB
MD5

4e86053bd31d61976c4df69fca172380
SHA1

d3f3364835bea911af90f9528144a468554f8233
SHA256

3e5845d20d664fa16346ee5468b45a296d3ec9895f2909f6c3de09ec838c0fb1
SHA512

2734a66a865a5b7334f363555d7acf2a11ac348dc84b7ce9c18efe051accda539524d8df1c88357c7bd43ecc1d8fd4d45ff05f61de7b44a24d888accb7e7803e
SSDEEP

393216:eH4i6T5DTSOJhyG+T/D1iDieY/9Ricu60Hf8K2NUOK5ycgmaVkFZBejO4:eC1SOJp8xuhY1zOfzIrBfmFZBejp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
608329_IGHaI.exe

Files

608329_IGHaI.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ewu97
Size: 15.0MB - Virtual size: 15.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zsw3e
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xwbamh
Size: 7.4MB - Virtual size: 7.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 445B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ