certify[.]exe | Triage

Sharing

General

Target

certify.exe
Size

170KB
MD5

d46c64b7ef2ee94f233cecbae198752b
SHA1

b6e0b3b1fbbdee78154b07f41571173009c972f6
SHA256

f7bc42ded4a2bb1c7092343de18fb261fc8a0521ed7cf5afd174955bbef461e4
SHA512

9b090fec7da1487ba25f81d5c5ecc93bb3af6ffa040079a24997c94afd13bfd17db5c73f81019b8df8fc66f150866c6d0b0aae0e7f14c228c209504f11608f44
SSDEEP

3072:FxZxTkvyB+xokJVQnH0Edu+fNcRyzK6pP2bxFBhlRv/kqSC:Pkvw+SkJ6nHF5NsV6pP2bxLhl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
certify.exe

Files

certify.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ