000e[.]exe | Triage

Sharing

General

Target

000e.exe
Size

31KB
MD5

5979f07a15f582a639da41a8e823d1df
SHA1

af4b4d79cf486d752e0119afd30a147a97dcab20
SHA256

cce54b20a1f6a722798cee8de9dc8dfe3a349b20e721ceb49f9a13bd89a221c4
SHA512

d63893b70843c9653d7b253cf451fa070cbf1467f3a874fde16e18ae922e29038eb44b63132ddf71316d7fd18874960d251071a3436b12841e655067f57d8851
SSDEEP

768:tfJwtpeE7wP7kY3wbXwEhWgw3ccrfLMwr:0ujJgMSWgw3cafgwr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
000e.exe

Files

000e.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ