17[.]12[.]2024 ????????[.]exe | Triage

Sharing

General

Target

17.12.2024 ????????.exe
Size

909KB
MD5

344967abba36524514c992f808adb6c8
SHA1

1d9689bf64b4de90e2dfb4d8df18cfba15420b96
SHA256

b70e02c6c4248dd1af3c6ed70b9e016592ab30f6020e109767cbdf81b8c70b02
SHA512

7abf46fa865417af1e92006101cfbfe1c29ed4c030750db412bf3ef0d924670efdbd5615bed37e0976410b104a9668dfd780e6d0f9fe21f7a233324c213ffe70
SSDEEP

12288:gOMPku+l0CPPOwq0b9XvY3GiNIyqp8Kfy1XYUWoYsaj5Ki2ld53wLgsR0ufYs0yT:WPd+pOpIVANFq+KfydxYsc9o53wcuz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17.12.2024 ????????.exe

Files

17.12.2024 ????????.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mcAp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 902KB - Virtual size: 901KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ