Microsoft PID Checker[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Microsoft PID Checker.exe
Size

10.6MB
MD5

2c544f4b1a38f88bb994f0dfa8086806
SHA1

f3fff5624015ce70c0f2e0dc170be94b52ab72f3
SHA256

d62a5168dee0927fe69d84d2b3521871be2881dc645d7ea10b485e503316ea73
SHA512

71ccb63c0e8d3f17335be0d78544448cfd951a641e4f899386437a6af49dede9d1bd2a319a1303c2516768f60683c6af67e52d3237de31b3b06ac9d476a03a78
SSDEEP

24576:DgqSboEPwUX4st0WUhMfu2S8RwD4+6QpI2grJ/TAegXuvQSiker0q48Fli/ajLs3:DgqqwJr0D1wXS2g1LZJHnIndasG

Score

N/A

Malware Config

Signatures

Files

Microsoft PID Checker.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10.5MB - Virtual size: 10.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ