tier0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tier0.exe
Size

314KB
MD5

3dba1e0babc4fb2a0e5fe2cfcd298aa8
SHA1

a85c7ff6137e0101aaa2f27008754d83003973a1
SHA256

62c2c1b776d9ccb809744f08d4fea58a4cd22bf475a4328077385ae4e5b22080
SHA512

121871991b92ea6089958d4bec9a05079cd24de13d5173bbcaa05646be1d8ff1176127bb65aab816155ffc6999024f86344d1d38f4df89432cc0fa25970cf416
SSDEEP

6144:dQzJ4mHcCLC/nWz79nWz7NYp6hYp6rvDLuimKkBI:C6mrQiQrfqI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tier0.exe

Files

tier0.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 245KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ