coreTEX_report_001pdf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

coreTEX_report_001pdf.exe
Size

31KB
MD5

44b06168b10eebc22c0e92964f6ea1a0
SHA1

a340a328fadc9e6c6c845c405b7bbf337981fe61
SHA256

8f90399cce02c4107aada84e016b449c8ada939c0af54ed104331df347843478
SHA512

2833e0f81b3f2ef5cffedcdff91400ea0d32eea224579d8c1fb9f864dc86d24123c68fec13600de7940867e0f0dd9b00c657bfb6ec62490bdea7dc4f7f555b05
SSDEEP

768:ztRRRvIBwPMb+F65Y/XDuZ+jMnXdrGtRDRl8b37l5Nu:ztd+m6+m+onXdrGtRDRl8brhu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
coreTEX_report_001pdf.exe

Files

coreTEX_report_001pdf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ