DUCTILE IRON VALVES[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DUCTILE IRON VALVES.exe
Size

973KB
MD5

cc040cd27bf6f03b64bc206d76e54652
SHA1

72982cb983b8ab0dc323e2ce193b4e837280b8f5
SHA256

95878513896e6bd53a77a199d6e382260ba241f52565472d923f30495ca7184f
SHA512

2f99ec25054ce5fdc9c9db4fe132f7d2986c9e69783e7d2e73cd87fac313c64196b86c3825116a4ff9cbca6ff1143ef5d5e9cdfde28952b95ecf93255649826b
SSDEEP

12288:NJseHt6nhoJXYKpC9dqWdEal9+4Kqxk17FTIr0jfnDJsZPJh:hNNXCTEg7CFUaiZhh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DUCTILE IRON VALVES.exe

Files

DUCTILE IRON VALVES.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 971KB - Virtual size: 970KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ