vaJBMLa9PX3g4P8[.]exe | Triage

Sharing

General

Target

vaJBMLa9PX3g4P8.exe
Size

86KB
MD5

52b32b4d4e7f2b918eceda96cb755e41
SHA1

efc17704ec1e32f4228c7ba030b70ba2b5113837
SHA256

2c99b1f642afde5a77d480ce56dd3f9c3e3d248004557fde144f28d75cc96595
SHA512

8ebc502e2a6ddd5d050bc7c5350ec51f07576c2c6a31b5f82b87c3e3d979ff3ba090006eeb0a8dbc531bc66ea8968152af8e40cb938790124b8bb39ae2b39cc4
SSDEEP

1536:e38SRAo+1qDQHBoJBng+foNW2hLUAjYeHEqIALZiAg4b8jBTjD:e38SRR+oiong+ANWUz+HAg4glTf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
vaJBMLa9PX3g4P8.exe

Files

vaJBMLa9PX3g4P8.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ