64157d14bc770c59f8cfffa73f7dec64d2b2a1568329712681633388cf682823[.]r00 | Triage

Sharing

General

Target

64157d14bc770c59f8cfffa73f7dec64d2b2a1568329712681633388cf682823.r00
Size

633KB
MD5

16064f256cae97624c06245b53ffefb8
SHA1

eb82d4b36c13f98aff67ea626a286f2821cde63a
SHA256

64157d14bc770c59f8cfffa73f7dec64d2b2a1568329712681633388cf682823
SHA512

4d5dfd7f77b9b67b191f967f79c6c00f2d5b2421cc7347b220b18574ccaddbf50bdb634c3bd368be826886c04a5bcfd1fbc2613b7fd700a00d1138833ef95fa7
SSDEEP

12288:YJN8lG7s8RmXpXuqbSmj5iNCsOg5uaptjLst/QCvNEzg9GkiMQQY3jCG0cC:LQ7sZu4oNCy/p0NEM9LQQsjCGnC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/lgh5walrVUMJyT7.exe

Files

64157d14bc770c59f8cfffa73f7dec64d2b2a1568329712681633388cf682823.r00
.rar
lgh5walrVUMJyT7.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

oXGUQ.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 799KB - Virtual size: 799KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ