Hanson[.]Product[.]Erp7[.]Hrm7[.]GRP[.]exe | Triage

Sharing

General

Target

Hanson.Product.Erp7.Hrm7.GRP.exe
Size

7KB
MD5

1dd1489c65a00c3bd5f686c98444f080
SHA1

bb71be6ad338e904b1d334f8c21f41bf3e4c5f56
SHA256

12e7c12e40f2da3054e91ae03f1130defcaccf82247c241ffd07716463f9814e
SHA512

bca27895c1d3c379716ef8fd2b7ea123144cc7034ca8a215b3afd0777b5b9fc84ed12c407ac6ebc5df4a555a4e1bef129f8b05d12f8a39b23162f4e8b2865f55
SSDEEP

96:vdrqgGOyGnie4J9UhfILNL1eh+2A1E1pXiY2Ukof9dI9zNt:9vGOyJaxILTt1EHiDQO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Hanson.Product.Erp7.Hrm7.GRP.exe

Files

Hanson.Product.Erp7.Hrm7.GRP.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ