hi[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

hi.exe
Size

1.5MB
MD5

d058264e3bc840801a74be15f36f9552
SHA1

fbbaac4a35c2cbae0e29eac31b623c1907198928
SHA256

bd83cc96541f1e9dc576440762afdc74dbffe24a59c4b3f2371b47eb894e9bdc
SHA512

469a3283bfc9368058046cdb9bd5aa8a34ebe1efafe409e884ba23d33065ad7ef924ea535b5e7d01c6e745e82879b55fb66b843de6a490f5848741db00f5d1ad
SSDEEP

24576:G03i2Q9NXw2/wPOjdGxYqfw+Jwz/S/6RZs8nVW6k5JHkARt7DBAqnF:lSTq24GjdGSgw+W7SCRnVQTEQ/BA8

Score

N/A

Malware Config

Signatures

Files

hi.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ