file[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

10KB
MD5

4ee264403dfdb6819b2a5fbce554f3ef
SHA1

b351c059d8dfbe69ac1b1d0100e49425dcecf5ac
SHA256

71f444cfde53289c8819334aecde5e7f3c52d0d094e07443af7eb47edc5f0b0a
SHA512

1094a6bab30e2cc8e9f2db6b26a4a92401698642261e55baa032b3aeaa2303735d75588fac12c1ead0d084a70232ccdcf644677c02d05eb15134ea9cddce5c02
SSDEEP

192:KSLZ6nPp/KVfnnnnnnnnnnLuoPunOafrMdQ35+:K2ZEdSDuZnOoMwI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

Files

file.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 568KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ