API_Demo[.]exe | Triage

Sharing

General

Target

API_Demo.exe
Size

30KB
MD5

9fcc409dbced462defffe1d196c6087c
SHA1

0e6f84817ca815913b2fc007fc795033cb8e53c1
SHA256

9d5b7395c4dbd73816c4dbf0f9a9fca58993f59f11e6f219eb2e0266751a4e89
SHA512

aa59258b1759fe953fca2fd7b86d0ceac4f5b6b535ee205cbf8a0eab637e673460d9a016d4da8d9a81ac47316a3f1222623124ef6ab45e49aa8354100e8f381e
SSDEEP

768:PM7NZ2Hu3SzQSUp9y2spiuec91LvRCij2Zx4JCd8+xW7O:AfQu3SeRue+1j2/4N+b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
API_Demo.exe

Files

API_Demo.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ