Advanced-Copy[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Advanced-Copy.exe
Size

755KB
MD5

928eaefb92ff4d1ed3453bde534e6554
SHA1

ea03a128e0c43092a38ee7d778f281a6b6984cb3
SHA256

e01a2923333399c3e27f0ad7be478f1fa0e61976c7d9e4a64ca7674565b7e130
SHA512

129d5c2c1cbd656dfa7a7e34e8b3b5db90927f9ed1ebcb487104e58f3af7319fe7f6a12450237b4c8b40fc599cfe7595b713c356120613a79a4601fffad77a57
SSDEEP

12288:432B0xTGlxNqvNu2hZ+nUEsn90X8UorgPjgYqyf6HQ/BnHYjtwCK3Cg/FuFcKPJ:43LaVUH99905oMrgYjf6HJ6CK3C4YFcK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Advanced-Copy.exe

Files

Advanced-Copy.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 753KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ