win[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

win.exe
Size

1.0MB
MD5

29aaa8f5e89c56e6e24e32cd3244c734
SHA1

3ef497c8f0cc5cbd230171d86590daf37be8dc58
SHA256

3e48d935df6151129bb3db98fe0ee5b80c5ef11eb0954fddd4df563e99504991
SHA512

815cffb23a223f3629ef913253fdda7b5c340177970f4404fa1165421c2151017e6bb817f2a2d8fa8fcd55e019fc9ec43630663b2ea37dfb3ff65921c3529dfe
SSDEEP

24576:Gp5M9tWrSeNaH6q2uZZ6YxrLFFLiL83pi:c5CWrSoaH6q2YZrFFtES

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
win.exe

Files

win.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1009KB - Virtual size: 1009KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ