pmexzx[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

pmexzx.exe
Size

653KB
MD5

952c00faa8c03d63f21f79234ecc61de
SHA1

6ce71c84deb2ab9051d45fac5f0671d162238383
SHA256

519eb19ca7bead14df6cd6e6b4f8363fcce42100158c728d4dc8a3cca76a44fa
SHA512

5d6904ba7f1c770361a5926fb8a061cc827ef84bbf05fe972d46d95d3ca90fad259894fe9b227c9f00cc1347fe4ea8e7996023e885e4aa451b33cc86925ba4af
SSDEEP

12288:uVmH2iN4KP41Fn4LSWVIU1QWEZDiVYynXfjCnzqcX9ccNvo78:b1q7rn4LXGvyXQqe9cc9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
pmexzx.exe

Files

pmexzx.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 639KB - Virtual size: 638KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ