ProgrammerHumor[.]exe[.]exe | Triage

Sharing

General

Target

ProgrammerHumor.exe.exe
Size

1.9MB
MD5

e43b4b2d5fc246f04f1652a5cc3a9deb
SHA1

304769d7242447454ec77ab1970aba71748ca822
SHA256

f077315ae8783ee24b4a74165ce2053be4eec46b470799f5f13d5802f272b685
SHA512

f5d4852fd63895cfb8074797e72946bb2df2ba34d8b8aee42f2d0d7ee6a457ccf39b070921e08709ca1efe9b9525a7f80857e869637de858343b689b34f34f99
SSDEEP

49152:ISuX2+C8qu0LIfHCKM5+2aRT3+jdsVtIDsxDYAG5cT:ISe2+C8yLIPCi2ah3+eQeDYXcT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ProgrammerHumor.exe.exe

Files

ProgrammerHumor.exe.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ