G1634-385760[.] approved[.]exe | Triage

Sharing

General

Target

G1634-385760. approved.exe
Size

640KB
MD5

6ad52612b645fa22eab78384cb1a7b34
SHA1

dd56aa5b46aa1354a4a54288cd24fc8762f6b8f0
SHA256

77c9fddfb4cd4c0281bf1073491173b12e53886446aaf899ed2fe0d8fca451ab
SHA512

064005780b67682234e5285d611949dcb5a13a58afee20945d3112a23a653afe316bc9ad602a48d732958c3d9c54f7be3ce7d0c7329b752789c4c1bd3e0168f4
SSDEEP

12288:O3h9fTem2mOxSLoI0nGc+u48FG9UHWs4u7QLvnbmjRDe:Qh9ft23koI6YM4UToLvbm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
G1634-385760. approved.exe

Files

G1634-385760. approved.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 637KB - Virtual size: 637KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ