tnbws7pyQvMUSjF[.]exe | Triage

Sharing

General

Target

tnbws7pyQvMUSjF.exe
Size

731KB
MD5

17a1259bd9c1cb80ac8d105d513bed7f
SHA1

cae2ad2f6a8055ad2145e25324d29033fe1133ae
SHA256

03b5cfab3f0ffdf96e415006004be9a0c05e6365e1d5834984cfd5cea9df85fe
SHA512

f3edf3d6e0c10fd71e411c78fc7af1db10c0c4d56cc796dac113eae2afe96ff30eceb4d0c275a48bded4aeeb353e1a6d22f19f754baf1fd218b8fdaa63ff12b0
SSDEEP

12288:XTrw1bZZn9LJ/x0NHhVdAU/ocoHqXNAN5sNUEj+CQBuxXF29cGNzw1ZW6bEm7N52:DrwLZnR30xhDLocIqXN8u+CQ0FJGVuZN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tnbws7pyQvMUSjF.exe

Files

tnbws7pyQvMUSjF.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ckcA.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 728KB - Virtual size: 727KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ