kZJh2zU8xf605cQ[.]exe | Triage

Resubmissions

25-01-2025 21:43

250125-1kyzha1lhx 10

25-01-2025 21:30

250125-1cnhsssmhn 10

Sharing

General

Target

kZJh2zU8xf605cQ.exe
Size

1.0MB
MD5

ef006cf204a8e12a2ea40abd4116fb61
SHA1

35b3038c748cc29bd0375e94536e1d0fc407e876
SHA256

1f3cd4dceeb34f2461fdd41d264624239463c7336572b270cec2b57a4ce7610e
SHA512

fd4d31b52171697616083f5309af8b7e1df43d596ebbb2cc579595dcf9bbd678cc7d53ea70c0c29d2c514c84c10130f0005129e1ffaa544940933f533d3b6266
SSDEEP

12288:D9TowR3+WnYndEx1MfkwbSUhsGWBK/rAcBUajgYQkYf0Tle5:xTowR3+WnYndEx1KkjGWBuzgYh4p5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
kZJh2zU8xf605cQ.exe

Files

kZJh2zU8xf605cQ.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ