PowerPointSecurity[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PowerPointSecurity.exe
Size

514KB
MD5

0aa618490d8eb22aba1ceb7d762d26fb
SHA1

0970e367ab16ee1c1b2c38e09cbb86b6820a8211
SHA256

652fdd31d98e3be8d7998e5f6cdca8e89c57977ae3da298ce602c3f6e33b41f9
SHA512

c3d5566d72ee691e0869b12cf2e58ef0616209f68931b880208215f6ca5b6a333d792f42147c9a5b9bd461fefde116bce0ad886fe6a76055fff82051ecd7549a
SSDEEP

768:ktcVC+UIkptkkaNfCgwqi2yttSSH2KEPNElQBAI5DCVFwCgwqib53wCgwfis:czI2tkkaUii/thmDCziib53Xnis

Score

1^/10

Malware Config

Signatures

Files

PowerPointSecurity.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 350KB - Virtual size: 349KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ