Verifys2_prot[.]exe | Triage

Sharing

General

Target

Verifys2_prot.exe
Size

89KB
MD5

4123feb84a51d08ad1e981e0864e8f1c
SHA1

441fb7a8588c28bd9c449a257a157f4aa4610eea
SHA256

512a144a8f97472e0ec8db7f7dc5da4519881ea5ae8b25122567a17175ac95eb
SHA512

48a22247bb14cde95b72baeed4f7bfdd4ea109c17a617d99684e05ca1194ee1fc223c53e256f37f0c7e23f0960705145de9126f038ccf57eecbe3294fbeeff6f
SSDEEP

1536:K5TGE/S/btVKZeptWuSOxDQdhegjnEFOXZ1nj4TGz+vDoeJeunJehf7T5lyat:iTGEUbLGepXYheg6Gz+kWe2eh/Oa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Verifys2_prot.exe

Files

Verifys2_prot.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ