testing 2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

testing 2.exe
Size

57KB
MD5

977ec4984fdb7bf030997862a186c377
SHA1

aa7047884093c338d1deed08a9729dc751eeed4d
SHA256

f88e01f6481379361e1fe728f8da5f0c29c9088595f632b82c27bdb6f7ea82f4
SHA512

4463804632a0fa576b0c5e739d3a3c26d77c1ecb8b7344f2842764b838280bab65370261746a754efb3d23254b741bc94e7837b0dfb0ce0c09a86541a2280277
SSDEEP

1536:ukIs9iktzmZoUyKgYLX7uNbd8pHPIqnKtW+zx:C+cdr7uNMrKtWox

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
testing 2.exe

Files

testing 2.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ