download[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

download.exe
Size

11KB
MD5

586e4ec2304ddf0089a7822a01623181
SHA1

ee643d3900704bea828f8aadc1a5f4bbeec596a8
SHA256

d0043009211a1d48c601ad011eec26bfb01d56331fe2509a7422d2ed984089bf
SHA512

9c3b8643d3b01bdf13f5503d8d53a5ae57c88f35df3fe5f2f8d754bc71c031a26188f4057c81835af7fe1ac1150deaf20b42c93f76558283dfea00f610a3d0db
SSDEEP

192:6prB5mzmN6F6EtFqTqEhqmBAejp0vspErX6tymAoh2XfGW:6prB5mzv0EDq3Aejv2symAosuW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
download.exe

Files

download.exe
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ