DealarOrDeadCode[.]exe | Triage

Sharing

General

Target

DealarOrDeadCode.exe
Size

500KB
MD5

e1c82191b678cea8f3c996887ddc1232
SHA1

7946006ca278892817b7a778eea1e04f5b2f948c
SHA256

bd00a7577088b67b52699f956275a3f563d623ca907feeeaee8d2f821d35de40
SHA512

cb1499db7c1a7b3c4436d02a1218a055f9c04d7b4ae2ca01fd179a6bdb74c30c8cda1ffda8b61dcc3397b97351b77d683295cb46701a614cf7341906bd807804
SSDEEP

12288:kU43i+9MrOq5q7pN37VvbvH3pJJtlueGAmp8R6LqSY4JiFZlmM5Ki634:V4JZDhAWS2ZN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DealarOrDeadCode.exe

Files

DealarOrDeadCode.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 498KB - Virtual size: 497KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ