reverse[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

reverse.exe
Size

202KB
MD5

783ddc6a4471862321e852037f9c6288
SHA1

1404a93c4bd941e395b0c0e628c0f61520b05cc3
SHA256

935d4f84f1f1afb65dda0ea548d7e1b77551a1ad2f2a38dcb98a35b23c8a583a
SHA512

ee859a5ef0581b28a5d6d522bee690dd3157696bcd80e72b333a6f7c9866b2c28c079506c6d4162124b2a8726607c4311867135697abea443535f15f4a77940c
SSDEEP

3072:0b/NPtQdKGlffCIL6T5izPZ/M0Tcgy0mc0drnew60CxXj6nxwsHMr:0UfFLmqZE0TZTb0drnwj6RM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
reverse.exe

Files

reverse.exe
.exe windows x64

b4c6fff030479aa3b12625be67bf4914

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qyhz
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE