XnView U3[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

XnView U3.exe
Size

100KB
MD5

2289813db7cdec44ed39444d18dc379c
SHA1

e10af40feb48fe7dfb23678312bc669821612446
SHA256

274f02ec992bd9a1b70bf9e2c29add459dc6322844e0815cbd22b110b6761357
SHA512

a0cb80c0b30371e747bccbfaed2f9f57feaefa490786a5af0a26dd16e88b4ef4101644f37ec4b2920928f09a39fa4daf48a2686712c83901b88cb8ef462c70e1
SSDEEP

3072:ImwbA8cwUjgo53kCo1YsoJIfSH+jC4kfihvCmvyx8zbRVeS:IvUHq69IftZkfihKmKx8Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XnView U3.exe

Files

XnView U3.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 228KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ