rTEKL__FTALEPVEF__YATTEKL__F__[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

rTEKL__FTALEPVEF__YATTEKL__F__.exe
Size

890KB
MD5

c53b67af325066b418d5acf3e67e93eb
SHA1

8a5b6e006d5a2dc6d18bc679852d4c2e22e6ed9b
SHA256

18a2d62cc5a151ec2c53c054572a0c762f4f7d6ed600526823a474498942a770
SHA512

313b9c55711850a470f8be90aa0493adc66ab3213df795e27212e9b31c46f3910eff7ee002602e9f58e9c7dc64e0eab2fba4b6d68f31fa0f8c8636c071a1e3a3
SSDEEP

24576:jcdjNn2aRLG6sBjelRZyN8Mv3ia52cXQz1Ft:0N2GLG5xelRZyGMvn2QQz1Ft

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rTEKL__FTALEPVEF__YATTEKL__F__.exe

Files

rTEKL__FTALEPVEF__YATTEKL__F__.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

qTZd.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 888KB - Virtual size: 887KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ