ConfigSetting[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ConfigSetting.exe
Size

76KB
MD5

df6f5dec76785ed5e98ad0af3d68d1e1
SHA1

a0394a8587190b649c786b92f975c2ab1d21afd2
SHA256

7bf6d2ab633f6b0285ceab69af5a5a4055e69b94e01580724435b82a7fbe6ae4
SHA512

287a553a8f6089b74e660dec67fa67e498b099c958949161e612460aefd13e6355247c00d62973eccfe7a1e7b4bdb532153161cf32fcbdc6c28c89aee9e0d9bf
SSDEEP

1536:IfD53uYjOQgIhJbD3avCcU9P2Yz3+5J/6:IfD4YjOQVhJbD3avCJx+Ly

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ConfigSetting.exe

Files

ConfigSetting.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ