HipTool[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HipTool.exe
Size

15.2MB
MD5

b1f37f8f0a73fd3df413aee05a07f2da
SHA1

ed562e7cdb191e437bd88c40a6d8fa1bfcd4518f
SHA256

19e0b8187f554876a2fbb7658a23a36064b61a071e1a78a3e9b726b99d8ce3a5
SHA512

a9d1c4fa787225f9073ae4ab598023d61ff12473b58e22b8aa46bb797f5ce4832b52249fc58231ac600c93429300af2d1fd3fed2a4922420129fbc7035458609
SSDEEP

393216:uXXh80u6V47lsBdY/fq8nj8JTE6d9TkIRtLe:q1ud7l6Ynq8nWQ6d9QI

Score

1^/10

Malware Config

Signatures

Files

HipTool.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15.2MB - Virtual size: 15.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ