z40mQqFmSBuo8hE4On[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

z40mQqFmSBuo8hE4On.exe
Size

647KB
MD5

17b0841765e530c2a63f56491175b355
SHA1

440b7dce2daa1d00542dda1ee205ffebf0af99f3
SHA256

7088b89b9d335a4e569a7f292e35d24395345b272d10780f09877eb48af3b5dd
SHA512

5c587bfb0ff450b371f7f52add40aa833bc1e9dbb65c99ea1c17d690c443be62a4f60b55316b458cc955e6411a78de453660d3921b5f2626eeb50074eff09034
SSDEEP

12288:ibIOYqPaaa+b4RGKti9bZYiNAymyYHskGXkxYcO8OnfgTx7F7RrIN:ibQqyQb9Ktwb9NAJMkG0Kz8Of4x7Fe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
z40mQqFmSBuo8hE4On.exe

Files

z40mQqFmSBuo8hE4On.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 641KB - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ