Verifys2_prot[.]exe | Triage

Sharing

General

Target

Verifys2_prot.exe
Size

307KB
MD5

5ffedbbc88cfa2a55936995b870eb6ee
SHA1

a9d8ab40962822dda66dba14aa4ae54b11f053c3
SHA256

9a66da15dacde950e03e9aee0bd458c965b0105390fc1a7bd19952aa794f1ca6
SHA512

ddd6a317582dc7ca26ed8c183c645009bf334d3ac5731a9a2a964ed28701d36dcb246980c1f0453c8ca3145838c2aeb0da309fab53ff338d3d59a3172f97b736
SSDEEP

6144:v5ybjQcZIR6ojuDToLsQOVchxxQf5u2nu6:8C0IKToCV6J2u6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Verifys2_prot.exe

Files

Verifys2_prot.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 305KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ