file[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

41KB
MD5

ee5494244dade4bfbc3dfb2cdda96074
SHA1

1ccbd1fee45684b6d31aca857289b58f6ce8dc81
SHA256

208f66c766423bbd8e4b75e3b5345b21705f3889f51084319b74b540122bb1f1
SHA512

2cd10b1a9ed6756d4126703f1c3cf1d2abe7e1fd7d68d4907dabf5c6a1ba2c54a8472dc9813e93207e1d92a88c3bd203fa3392b2f860ceabb46d8a3bb2e3fa9b
SSDEEP

768:4iKYyyaK+U0OEuFAh2UWymQ5FU+jR0nvKmNAC5zgXgy:oWaDOEuFdSPR0vdNd8gy

Score

1^/10

Malware Config

Signatures

Files

file.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 167KB - Virtual size: 675KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ