file[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

656KB
MD5

f212aea4eb7dd8a4cbb263017b1eca47
SHA1

d6aee0d64677c422927d8c56a2af9d77d7610cc3
SHA256

efe3cf08bae2419592ffab4158d5edd20aef2788678fa930503c06956c7b524f
SHA512

6734b801d801ab0f442df5d009fb7453324c9226db6c92bebb185d67aad9d1a80d06e2790852ff36095e7c6f92ee35fc9220e838b23e4fedb529784b7dcccc65
SSDEEP

12288:i+X/LHCY9zisWY9XVCV+zm8kbiWeh3ih9HvA:iqDHb9ziOXyt8rBYTo

Score

N/A

Malware Config

Signatures

Files

file.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 645KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ