INGRID[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

INGRID.exe
Size

779KB
MD5

1a96069fba5f8ed6563a679d94e0f7be
SHA1

de8f0105e4a0155b3ef1ce1b5e936fa0e2ac15a6
SHA256

a291b7903b0d6f24b9a03abc38260c0ebf159afc41e15fec5f44b50638ce51af
SHA512

e4e6cb21dc4037bd5aa26d2857506b5761a08e4d9ba8032c0fe6bfb977a11bfbc430319c2d8efaeeec82012d43238a72bb3685816b1a3c89f4842ec10a9a62d9
SSDEEP

12288:6CQ0O7lWq9tg3BRtkRlVMV9fpAdP8ZOxkAPlSCcl:6ChO7lWq9tCku/GdP8ZOVc

Score

N/A

Malware Config

Signatures

Files

INGRID.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 777KB - Virtual size: 777KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ