r8ykXfy52F9CXd5d[.]exe | Triage

Sharing

General

Target

r8ykXfy52F9CXd5d.exe
Size

759KB
MD5

6341110aa0627431093ef3c502f65669
SHA1

12dd6b363e9d841bce3fd0c007b1e84796909149
SHA256

761930655c92d23751075c7399bc4d384270fdeab881a8c486de0362a976b4d0
SHA512

2aee95c0f40f86f6c505cabeb2797aab5e587b3021c40156c2f5bff0ebc5d6787c5975a1978a4747a303e7cdba637498bac923a7e633931dd79b62feffaa8224
SSDEEP

12288:IQ11UoIG5MPUNDguQL6/Vt+uIMtBLn6TnfymJVDgP5BhMW+:lUobySgu26t/IMt16OmJidMW+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
r8ykXfy52F9CXd5d.exe

Files

r8ykXfy52F9CXd5d.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Jhvo.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 665KB - Virtual size: 665KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ