file[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

709KB
MD5

8ace7745ab25bee814881d9cc398fc04
SHA1

aa52785f4228d8042f1ec3383702d9dff500cae0
SHA256

3928ef7cbe0de57788f45541e81efbca87f3d0539c84c1dfdab9cb675a1c9c62
SHA512

be366b968b5085776b2a11ffdb58c29aff720f4aec1f5008801422d1f8c68207720ae388e1ce80a1b9cc9087e89c8bcb5f201ddd63ca4184a86fc4180aa9ff01
SSDEEP

12288:uAviTB2QwVtj5foGj0D5CG8DfjakhZq5iVUdVBtVP:sWj5ACMCG8DLhZbVIt5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

Files

file.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 707KB - Virtual size: 706KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ