download[.]exe | Triage

Sharing

General

Target

download.exe
Size

3.1MB
MD5

fe4704e5165d2d10218cb9c19473e517
SHA1

754e8eb01a92ebf75d28d7f869eaaa3dbcb50c51
SHA256

dc52c71f9a686ecba5993f0c7a183f0ed86f588bdc75490f24a4b5f61339995b
SHA512

64c78af51429ef71b8d274f3ad978ac965d1f01a046fe9c7e692eb4b7bd1eefdc5ddd805fe2e3f410a9bbad5dbbff8a2d69e2df5205ef84023120e604c16e59e
SSDEEP

49152:9qT0a34X5Tg1dMnM8uAXwJBMhwCuMln93T9LPKOzAfxKqnowNEvr:9qT7GS8uAXwJaiFSZ9LPK0AoMot

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
download.exe

Files

download.exe
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ