Psi_Batch_NGENTool[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Psi_Batch_NGENTool.exe
Size

49KB
MD5

50fdcd6bfd7c81599f1431ac27d3bbd0
SHA1

8df25b7f9ffdd6cb78d619909d2d43f43e47f402
SHA256

c3c5a283135b9fad075c563bd6606e54f9d726bfb64ac5d1d8b18ee516ee1ae6
SHA512

21e16305d111166b671ef6ac10e958cd8ddfa96fadc66cc6d9acd65048afbf1319b63470fb810d15fb3f6a35c9634feeda463f81a6b1dd70d0f572dd3046348c
SSDEEP

768:ENQVyMJv7qtkwv4W+PHiG+3Hi86zYcHeUZ:YQVyM2NvL+PCG+3C8HU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Psi_Batch_NGENTool.exe

Files

Psi_Batch_NGENTool.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ