DeviceManagement[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DeviceManagement.exe
Size

359KB
MD5

b8c8ca5e2eac16cb12e0d9174eb0e025
SHA1

60c9f48deadc3936a5b25dbb1880ff0a29223968
SHA256

54d31f8f96aa18b909a3eca9b7a8a4b58df90cffbcb23ba5a319faf85297ff41
SHA512

a23e9d61857acd0de7caa1c902f716593822e93df3a3e6ea2b9ecaac2608ae41cbc5bb1b988ee38ab9da45f777ff48f654f23903e20c84f139e746197736dbcf
SSDEEP

6144:YeN95zf5H7QAfF9E4bfxEh30rYLXjs+e5oFo/ApYc7M8piwldL87kSlN5bF:YeNPVHH830sjI+WVIpNRcyL8L

Score

N/A

Malware Config

Signatures

Files

DeviceManagement.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 355KB - Virtual size: 355KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ