5ed77020f0296739fb5b4ef5133bbdd84a0c8f69ac71cec490343b26dd066c4d[.]exe | Triage

Sharing

General

Target

5ed77020f0296739fb5b4ef5133bbdd84a0c8f69ac71cec490343b26dd066c4d.exe
Size

313KB
MD5

8e0ae87939388dfd7d6470bdd397b309
SHA1

3af328c5c81fe77ab5d74cc97866e03490e5d080
SHA256

5ed77020f0296739fb5b4ef5133bbdd84a0c8f69ac71cec490343b26dd066c4d
SHA512

d3cfb86296b49744ac9a89b6a4a402e44a3d65c137a4a1f814c698001a2c609f0c7ce9fadd483511f6ec43811a5f81bd145dd1899be728ed3d7a9b3e0bf9a756
SSDEEP

6144:5tvfPrQK/3z/LyPRL30UWUzncwhgaljiLhQzaV8dP//wsrlHdzWcsQnrBu:5tvTz/UEPsg02L0Y8JIsxHd0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ed77020f0296739fb5b4ef5133bbdd84a0c8f69ac71cec490343b26dd066c4d.exe

Files

5ed77020f0296739fb5b4ef5133bbdd84a0c8f69ac71cec490343b26dd066c4d.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\rje\tg\bj\Re\ease\gqa.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 310KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ