sp[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

sp.exe
Size

1.2MB
MD5

c7b1bb5e042e966bd5cd3f63f562bce9
SHA1

a160cb717d480bcba3950ebfff3db53f96d0eb4a
SHA256

773036a725f4c1598a283a1439b22b8d00af17a252ceb43e3f697c483fc4b344
SHA512

3781ea0a0fd7dc1a61dd52c557cedbcc13a6faa1b49a97ed13197a63f44bcc6ecc5d227e221426f921b0bfd9da896153db383dc6f1c4605a2f1229d9c15956f1
SSDEEP

24576:udf07RfxPzpU12ADekEh4dNYXs4eQAEYqzJvbfgiXktD+ab:uK7flCVDekEcYXspJqNfdXO

Score

1^/10

Malware Config

Signatures

Files

sp.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ