Run[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Run.exe
Size

88KB
MD5

265fb984357c1c4959b184518d307b09
SHA1

d2b1eb1f746b1fe9a46000ca0d5a19e0bd1bbbc5
SHA256

b480bebf143bea54a228e9426905f028049ac4bfc5fed6f0b720d7e991a579ce
SHA512

d1cae88a2cab8df6bbf1d927596d4c14e6d9ba663d4ccde94bdab38e9e29aeef3eb34a02e9cf727ac331ae6e413a8b24c0683d09adafc101d39d3b87e4debe08
SSDEEP

1536:1rWTWatdz1s+87TtedEmWGW+5pnyKRACLD0N2pSW0Wcdx5BWAaS5muR59:1rgWatdx8ledEmWGW+5RhRRhSCg0AP5z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Run.exe

Files

Run.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ