t5ueYgHiHnIdeNe[.]exe | Triage

Sharing

General

Target

t5ueYgHiHnIdeNe.exe
Size

684KB
MD5

a2d4be5c186159147645f2ff6ee1f690
SHA1

1799cfb6c5ca5224d72d7f1696ad36c2624fd057
SHA256

9f67248a754e414ffb2361932c591abe39581b21a20d51ccb46db5e534a9531c
SHA512

29b5307b7d05827b6c6bb8489357d6abbd8e293dd56a6f6a65d2af59111fbb9e0aa2a786ce0690b5eea6c025e3e78523c5cc7a193cf23dfb4f95863a94aa44b0
SSDEEP

12288:mdODvVloha83lbhzRbIniLawF+poiDsv6z6ViEqtwsdf9i72l4:XyhaUlVzRlqpEv6z6ViZm0fkE4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
t5ueYgHiHnIdeNe.exe

Files

t5ueYgHiHnIdeNe.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mHkO.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 590KB - Virtual size: 589KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ