IDMan[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

IDMan.exe
Size

6.1MB
MD5

2f7b88c14974cd82211039ee679e086d
SHA1

cba0ed7608d09a0d2be0d515e534f9e5792afab9
SHA256

0175c119f51a221f5e4a91d0c90ff7bd054edbbc21017d8ba323195b632d6587
SHA512

cdcc0228ffd98dae6c99cfbdbf775c4e156b4689844a646cc93e9540b1be52f227784f46108c4faa55b4ed0a26d326414aef30626f569eb7685ce7f6552c057f
SSDEEP

98304:KHtGCyV20wXVhCM5u6odWFP4L18frP3wbzWFimaI7dlZhBe0+Ev1T:Q0CyilhCM5gQgbzWFimaI7dlzBe0Tv

Score

1^/10

Malware Config

Signatures

Files

IDMan.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.1MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ