confirmation[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

confirmation.exe
Size

457KB
MD5

4d603e5b5f1d2676e979e6358d862fac
SHA1

7ae342aed5b1594a991239bf107f17a3da5ca0c8
SHA256

9eb9be1916033c7ef310216b96effe9c9836d5d62ddcfd34d259529a3fcbfbd1
SHA512

2dc3dcdd5754fe7669e1878125723b6b9e9aba828f0ce66afb1f258410e9e59001351e2c92b035ea5c32132aa58dec1cc241b1d6c7027a9c6d698f39c838a9bd
SSDEEP

12288:NBY7L15rHr8iECand5+EmKFytMLp7mkWB5S0tfGQiKq7RoX6:wLzHpDC3+duj1CXBRuX7RoX6

Score

N/A

Malware Config

Signatures

Files

confirmation.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 454KB - Virtual size: 454KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ