V1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

V1.exe
Size

24.7MB
MD5

3e36293372bc6efb96645378506b768e
SHA1

e011fbd2b86c869d503c9445b113a0a1ba8e6035
SHA256

db692d34f9b9a6ab2f2ce5f8092198437553d56aea3c00a9c5513a1b8bfaecad
SHA512

67d82a6d2e21412bc76ca3d52d9461b6f3d6505ed357a734c0b1785fec107b7fd88997d7eb71441f6a05514346e5c4daeaa8caef1843107c065342bc437a9e01
SSDEEP

786432:P+sV2/MJOxdvo+W/XUT+0T8GQ9N5ezAVB9Z8afbOKyzYkaC57:PBV2/2OxiVK+c5y5ezAVbaKysCt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
V1.exe

Files

V1.exe
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 10.5MB - Virtual size: 15.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE