file[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

103KB
MD5

a3b6211fe7e135aaa0d366c07cc6a84d
SHA1

8379c9d324f87141ce0b6ea26660bb9d828b7150
SHA256

daafceaeb05da40f64713e97ac78471a3ce23e5b2007f9fa708b1b83c9c687e2
SHA512

18ad1a95f8f8c4cd11d8bc1fe589c90a5b64f1bf7d06b63e938455ad6f8460f836e90f97363d2ea01bb42210d2d2ff214b7228b0190316d445733ffb5827288d
SSDEEP

3072:pAI6vthbuuzV9mfaH4QbmCFy3oKaAbL5b7Q4O5QBLojycY6mz:Kjy3oKjb24O5Qm8

Score

N/A

Malware Config

Signatures

Files

file.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ