new-donlautik[.]exe | Triage

Sharing

General

Target

new-donlautik.exe
Size

182KB
MD5

1ea16aac5977710f7a5b97ce2df937d5
SHA1

3814d33348166cc2e5c1a203217784006046c4ae
SHA256

bcf0fbfd840905283f177b0c6f61d57f09eb3aaae129fd66534d4dc69b77f97f
SHA512

544b679de4085598426d7f0b5f23f45c019998ec95b83f94e1d12413a481740a6e72eae5f145ee96d94b1c3e7e4b157ad50a6e25dd1d85d23a3a9a463db268be
SSDEEP

3072:fCe4/aJbBCBrerErnZDhHLg7G3Dyr94qbk6BusMLC:qeJJbBChhhrquFqbF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
new-donlautik.exe

Files

new-donlautik.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ