file[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

1.9MB
MD5

afef5d166670497a64ef81f1f2061524
SHA1

b0a689dcc3be4c211f9db665958696b21c98d33c
SHA256

8cdc020d39d4378285c7327611ccf8c31fc2e6789d3e5784ea47012d13035331
SHA512

b9f71097c615be9406362f7ed9a02a794430b45930d7a1626f7d488d40d69caf580db92e4bbdec5c01d5a7de9ab1f4f5a4d4848948c0b291277cd05f648af067
SSDEEP

24576:CCcQUvMemoohN2pruSwiPSCmDS+5uSldPNEQ/Lx:PtMMhYruSwiPSCmDS+5uSldPWQD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

Files

file.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 828KB - Virtual size: 827KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ