Active[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Active.exe
Size

300KB
MD5

5763aecb2a7a661cab4755d535f86736
SHA1

afdb6b4f18ad55aaf0ffcf4518bcfc4e16101d4f
SHA256

f3d5530a2711b157a28ad6e0534ca77d63d9c48db9a97deeb39bab5c53aa51ca
SHA512

a508238ccd09746b7cc21278758038d139c8a0536c8602b1eb098e3c3fbfdb307880c17b9d2417a9599dff7aecdeb5ac61196f6bced64fed8f2a7c73d24ad0d3
SSDEEP

3072:ojb+YnvYgIEsCUA+qhIJCLRoqOYzu2sS1wcq7B8714T6dAPBhHU6BsJY2F61FmC:sbVvYgI8PZhIJCWLhZeGTBfVsK25T/

Score

N/A

Malware Config

Signatures

Files

Active.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 273KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ