CalcModuleSize[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CalcModuleSize.exe
Size

89KB
MD5

da3349a0cb3732674e9d32734b57af87
SHA1

fb26b01ab04527392498121b403c46e98413f281
SHA256

5be2e28da819b01e12d972c72e4cd79a6e75eb0ca6a0b11bebb2f1a9dc18249d
SHA512

12ebe5b2d6406070dffde9da3b89f67c9495f259ab5bd8c081a3ac7246c62a00a1ad95531a4c6ea46d35e3b6f2fa1751c00beee6afcb7779ea1dd8027b1b52a1
SSDEEP

1536:vCq5zUQUY8aUoi1kMlXjKnzwlmaDhEvSAp7ZFXg8gwbWGY6jYvIl14ocVc+lp9:7zUbY/UoqOnklmGhErp9Fg8gwbWGYYYl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CalcModuleSize.exe

Files

CalcModuleSize.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ