payload_dumped[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

payload_dumped.exe
Size

694KB
MD5

3df447304985b22ade239d8e814dfbe3
SHA1

cbfa1eccdb2e37ef67c6e6c8c8e8dbdf5c297384
SHA256

107f40a0ad4d7f29dd2e475f16049c08431be0ce1aa39ac927acb59ceaffd454
SHA512

74fff2c64b450cd26b212d8322b570f180583702fcc1560ae0cbb3bbd881ecb2132eabbf17023426f931f801162bf60f2ebcb4493e395ae6866daaa17e66f6a5
SSDEEP

12288:WWY3zxPre9YgxUzYYMNaiLHPxNB1HI5HSHTg3gg9+eQzn:mE+GaOHjHI57Qa+eMn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
payload_dumped.exe

Files

payload_dumped.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 525KB - Virtual size: 525KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ