file[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

76KB
MD5

75ed3f6753ebb051d271bb513f50539f
SHA1

13f708dcd72e22162ed2cbdccaa9ceb430685284
SHA256

e7fca093b926acba3bc60a2d4079925f30e4e220fc2244847cb4e9ab480da59b
SHA512

5acb7d9f3ac10330378a4c9d85f44ed8f79d193aa4c3b3539ff831afe7fa3e93582a19b0a067a7f67b0c1d6cf99ab1a4365a004e867cce2e7df729fe9df3bd45
SSDEEP

1536:3YlRJYrt63BqeuERYH5qW6FpDsYabKWd+zimd90+E:36Let63BgHhM+bKWd+zimI+E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

Files

file.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

s<0l
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ