z76ik[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

z76ik.exe
Size

550KB
MD5

a87c856fdf11db1808e2c46b53dcf7fe
SHA1

7f1d5497dacca620ac3602b97f2ffda6c023bb8d
SHA256

b1520b6a3358bbcad7d55344f3d7bd2e75a9075ef4afd3f7c23de5def92daad0
SHA512

6801699f74da860678b0060ff277be07b0b258f0d866229cfe8cad3e3e6842d4d7afb033da59cfad46f40fd72c6ed5e9065b077c2530dae52837d966f83b084c
SSDEEP

6144:5lVdCvFxkZdT0+wyehH8ceNJ2SIc0EDXB6Q9NFlBoxKqUqxY3QsFNqkWIUQpZWWu:9gUZdTBwyS5aidE96Qp8Uq8FJTZWqpq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
z76ik.exe

Files

z76ik.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 481KB - Virtual size: 481KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ