Project Location Drawings[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Project Location Drawings.exe
Size

643KB
MD5

8110ce2cff6f04d8ecc18d996aa42d38
SHA1

c4c8bb33d75b9c58fb9ee6268a9cbd2109fe924e
SHA256

fc8873fec82ba01966c21663312aeca6d1c75a05f675a62b7000ff7631ef13ec
SHA512

46f8e342b25437ff3637994475925e5ed27b12d1c025b1f9257d5768ed3f6e0a915a473c31978d6afcf1d0794032fe7d8375cb75d9ce63fc4c28b3a84dd6840c
SSDEEP

12288:GsC6YN1PCGWd+UeoBxMR+0ZymsJa1ETqt9gQRAR2wFB4dknFYdRDUu:ZTQUeX40oUt9VRAR5P1UR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Project Location Drawings.exe

Files

Project Location Drawings.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 641KB - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ