vvndewpluori91026[.]exe | Triage

Sharing

General

Target

vvndewpluori91026.exe
Size

653KB
MD5

432644163e0aaa8a0269179e0e036eae
SHA1

b504d2a91b22bb45b886c1d117dacdfa724fe262
SHA256

f3c9e7b2e91b53c3256429497a9fb5d2cd449aca5d5a3b9fb705fe7d8c55d699
SHA512

f076b13cf11a2af5a5d008e62286ab1def0bdbf01e5f1388341575ac78552cb8ae140ba9f73041d239a0e2aa2a36db525b681d9bf138b3a6c815c8f41941e80c
SSDEEP

12288:HeoLvyENxun9zJ7qeNgA3KPIPryfZTHfY87PCl8YK3TkQPzLxnjwX8bQb:9dvun9zJ7VNR3KPMrGRNR1hcYI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
vvndewpluori91026.exe

Files

vvndewpluori91026.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Kltm.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 650KB - Virtual size: 650KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ