PostTool_50[.]exe | Triage

Sharing

General

Target

PostTool_50.exe
Size

13KB
MD5

d24973ff576a6fcca12eb73aee4288cc
SHA1

7bf57cba84c349b9295807ce1e288c5796881415
SHA256

fc29fee9de4f353b5a41c30d66e5a8286e417db0ee97fdf742ef096904a1e1dc
SHA512

ceeb7b896a0c4c4022b059630fa43e8d2b452f89e58a0ee85d6d5a044bb8e918c901c0859e18b8181648b4353d0b8da652d37c25a475a09d6f31efb74c9b55eb
SSDEEP

192:ewvlAsTfWYV4hnQcLLLWLlIPDHwaNBdrdLnLlveQlLX7EKTwPWeFOB:eCtTfwFLLLWLlwDQa7TLnLUYDQKTmW4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PostTool_50.exe

Files

PostTool_50.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ