skeet[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

skeet.exe
Size

777KB
MD5

9016581690b14a5b62d586f872f2f076
SHA1

3accf05c6203576cef7baa84be68f16336c051cf
SHA256

a83fdb680b1e2cdc9fd0887b69092fc3c656f98fed3136863984749615bb863c
SHA512

7dc84b481d5bc6525bcb58bbe05399b51c524cedbfb5bedab0240287359c37557602feeeeb37bce0096efd41f085b0f9a41926a948a8cc822d7956b4f02b3a0c
SSDEEP

24576:lB6L8OpO6nAG/fEZ/PKhq00K9wszgDnjx10Mt:lBa8OpO6AIEhPGEDnVRt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
skeet.exe

Files

skeet.exe
.exe windows x86

Password: stop

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 774KB - Virtual size: 774KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ