file[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

2.7MB
MD5

9bc3f65193e2c4d9b8c6b2bd9d68ca53
SHA1

5d85f3c08a2cf41b9afc8e0bbb291348a5da53b9
SHA256

bfc3633e1f0f1f2ca6be2607b90bd2514117fa74f0bd53f73ee4b9d3a2ef2acc
SHA512

44efae01c239921689b3ba231704d106b72ddd917dd4a8ec6c3a9ac0340b67fdbfeed2797d9b6c363bf9da9d4a0d20cb465ce44318329534b2d2edcdb966deff
SSDEEP

49152:VTpr5MnBsRHgoEXzHxu24lkeIJ+uqyXFuns:VTp3NGx74lPIo0X/

Score

1^/10

Malware Config

Signatures

Files

file.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ