OriginalBuild[.]exe[.]exe | Triage

Sharing

General

Target

OriginalBuild.exe.exe
Size

4.0MB
MD5

e187564031d3e0b2a9e46da755e19d50
SHA1

edaa89d992db4b1b189e35907331f5e95db233f9
SHA256

eb7ab121e39324ae260e96b9db51d99af0f1e2c627a883f8cebcef1efc699754
SHA512

8151278a3ba34be9d48033273e064e758d7e40d23237e5cfab7203f150c28ebc3d6499e92da29906716faeacabe91aa07807e61351a3aac4686c81ca0e7ca7e8
SSDEEP

98304:VHhCYZT8iGX7vp4THYPihcnBm5Sj4bHgkbA33vc+n:VBCYZT8PXLMHY6IHjGgkU330+n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OriginalBuild.exe.exe

Files

OriginalBuild.exe.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ