file_b09f38d4b12a76c78e651e92583ea94f_2_92556_crypted[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file_b09f38d4b12a76c78e651e92583ea94f_2_92556_crypted.exe
Size

887KB
MD5

89a652ac3630bfd2e493770eb866b066
SHA1

cad9d441bff74b39cf84a3fde53b24e7c1eb9f89
SHA256

d4fb0784707b173627871d9abf8a73d5dec42013ae381cb66d6b625e45dd3230
SHA512

cade11fa74981a189ba1573f1f4bbd988468b2e7c194c42ecffc3899ade0d22aaca5872e80220a1d0088730e12b98f1771dee23254247941f9dae727108a6014
SSDEEP

12288:owrGI968Khn+nMVHRetxHkqGn0FnnSKnXh/bQZZ6XOqn4Z41nc+u1TnEH0biHbtT:owrv++nMVmqcndnpMj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file_b09f38d4b12a76c78e651e92583ea94f_2_92556_crypted.exe

Files

file_b09f38d4b12a76c78e651e92583ea94f_2_92556_crypted.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

"i kUS.
Size: 419KB - Virtual size: 418KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 464KB - Virtual size: 464KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ