05314e81112e2a9c9a3f395f7a1055039aec7d8a5b900d55f509b924b4e690ad[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05314e81112e2a9c9a3f395f7a1055039aec7d8a5b900d55f509b924b4e690ad.exe
Size

133KB
MD5

a8f86eeda8efe769b705f4906e788fa1
SHA1

a5d24d0d64fcb24d5346a0d5301753dcc8352a09
SHA256

05314e81112e2a9c9a3f395f7a1055039aec7d8a5b900d55f509b924b4e690ad
SHA512

9b55628668e1c0d50cae76d8f8b8bb8f8b4005eb4eb17be9dac6db57b094dd6e7907d4df5c660634377cc81fbbb141f3d0f177d8a708ee6df9d988bb45a2c68e
SSDEEP

3072:0XIHx4LQ8t2ZlXTJcgxY4etO00gB3fz7WTs:3x4LQDZbcgxY4efPWT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05314e81112e2a9c9a3f395f7a1055039aec7d8a5b900d55f509b924b4e690ad.exe

Files

05314e81112e2a9c9a3f395f7a1055039aec7d8a5b900d55f509b924b4e690ad.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ