PI[.]exe | Triage

Sharing

General

Target

PI.exe
Size

745KB
MD5

f28246c7bfc46df9d95c2e8a4bead06a
SHA1

67a61938d06079b1c6453c33cdcffe08f6c12871
SHA256

2df55ec2cbfe5ba2ddfd9a597a1c2dcfe3c91f211ba611180c97443773f79732
SHA512

c92ed3b3e1c360eb1ee0a669b6a10769544eaee1eadb6f53e01b72110bf11720095101f8224df76dec2ccc2d80338674ee766a8f1912a28cde03a8c16007ec48
SSDEEP

12288:L8axZcQEP/SJa2Fyl6+jjFjSHe3sL6qHwIaP2TxmJoLqGzQZFx9:Luz/4LFylzJOHe3sLRHVaPuxSoLVQx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PI.exe

Files

PI.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 736KB - Virtual size: 735KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ