file[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

202KB
MD5

fc29a78b088f4f8763b539951c0224be
SHA1

07fd88a4752766c575f79b13f8a301cb675dabca
SHA256

936537585a8251109ee0e8d7eaa0685c084697acf6ffc866e56fdee102d34dec
SHA512

7e28402528a6af4a8d365c31bc9542484d87fd05f2859ae84cd253b5b24414b7a30af8a9654017b833ab62a35107043f772aa55c37b85e01844afe563ff3d383
SSDEEP

3072:tI0nPvatfJ7MGVFUaD9i6RAQqf5aMXT5m67RpexEzJ/G6M4kKj6n+RHcHr:tKt57F5TA53XTE47exEzJ7jRROr

Score

N/A

Malware Config

Signatures

Files

file.exe
.exe windows x64

b4c6fff030479aa3b12625be67bf4914

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ucuv
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE