sample[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

sample.exe
Size

11KB
MD5

b0bc1efb375f712a0595427c8eb1c2fd
SHA1

a236a187916942ec9d745cb2e90e3d3d0bbe5b02
SHA256

409dcf1d034e9330a2acd6694aacdee1243cf04a8b4ea605ff907ee5dc5b2484
SHA512

c066f07fd25fdf2148a95cc87c3d4710a9196fb5fedbc3e57372373be2093c0bf110b1625c00f9cc158ccace19f74bfe8ee0373ca2665fe833e99c9207c0c39a
SSDEEP

192:ql0VI/a+TMaoDO6hoZGDPeiWiKhUxxCZwLEc2ezYYRYqnK6OHlJ:qlZzMZy8ooDuiKExE4B2STK6Kl

Score

1^/10

Malware Config

Signatures

Files

sample.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ