c[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c.exe
Size

12KB
MD5

5965fa1361155000888622ca96432640
SHA1

8b69313e75f179a52280407d5307a5663fce2df5
SHA256

a0819db0d656417a1354f5cb7ecf756f0955f9b4f7166cf3a1fc06db5c688c75
SHA512

8f18d40fd2dda3570f8f2aba3fa651ae626b64362f77eee770e4fb151b74324ff4983914a17935a4d3ed323b2cc9bec768295ff8b4e9a3d07bba1b9f3c8a032f
SSDEEP

192:xPWooy3HR8qEWktsdWNHotbjUWz15n8MnVZSeaax:xPWox8psdW9otbd5njZzx

Score

1^/10

Malware Config

Signatures

Files

c.exe
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ