hello[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

hello.exe
Size

354KB
MD5

13c85c6f29c741790d5c42c91057940a
SHA1

27076d7c62536cf351aa777e6d2e9ad760a5f0e0
SHA256

e258e2d37e10332739fe5467bcaa82e4b894d15a55a1dd4861ac8edc95253651
SHA512

7cf42d264940356138c73cad69a18f65f95fc46e088a2c8cebb20782511449dfd0882c0a26b97c77091d94326b6c073894209397e5dc46d9d17204633638d193
SSDEEP

768:d8Uhbt25vDt1EmDAc5lVxV/AEUqOTguT0iQFve6qEYQb0V8ZSjAp74+fCvTZg3z+:d8Y25vDtYcOU2XivYfgydc7LKN

Score

N/A

Malware Config

Signatures

Files

hello.exe
.exe windows x86

2f3c5da38e687ed8e68cd2b55dbd54f6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 332KB - Virtual size: 387KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ