1h5OmzymbyVEzYd[.]exe | Triage

Sharing

General

Target

1h5OmzymbyVEzYd.exe
Size

771KB
MD5

223f14d66cc623f727b893be245bfb43
SHA1

b660b092d21a2c75b1f24256a4b4f53a21f38424
SHA256

f2cb987cd17107f4bc8171971eb158d0fc6d55c0e501b3e17c478afdbbc2e9e4
SHA512

b06b49f20f039b85e2177ddf380d67bcf94b460b3337e7ee6b2dfb84e224eae23df835dd69072f55fc56677eb36f1cb827fc04c1ee6a2ceedcddb5ecc6238838
SSDEEP

12288:kYfVG6swecl9j1Qi8HLagXUFNunI5iLdKy5mitqzaISeIrjVB146j6:SweO1Qi8HLayIbyEAcBtIvP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1h5OmzymbyVEzYd.exe

Files

1h5OmzymbyVEzYd.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 761KB - Virtual size: 761KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ