file[.]exe | Triage

Sharing

General

Target

file.exe
Size

650KB
MD5

bb292dcca7c43ad70905e8ceeb8b0e9f
SHA1

5216958805b874ef2d0a75b12e95c10b73afdba2
SHA256

6c4c77ede3669ff24fc315b7874e4de789f25d45660e2d31d584af57505fec10
SHA512

2c27f557845ff9f2be0ad4c482c5179355f9853d0e94a56e6534497a4b163890500193cc239b49d4e2736092e4c298442e9c4d709dfce11f2a4ac7d1c5f9ca12
SSDEEP

6144:yU9YDa/EIj/lfNj/lfaj/lf4j/lf/zGM6Qg2y5zoDd5c2K4DmEH58im7NeSlo2LD:y8a0gEBhpH58iK4Slo2LBUksfcQgs16

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

Files

file.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 465KB - Virtual size: 465KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ