Read Me[.]png[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Read Me.png.exe
Size

17.8MB
MD5

cb4ba95db3f444bd035d2b771c630293
SHA1

7cd5ffc7730a0a091dc91d7d9e00a19f2e2b480f
SHA256

97f068f59f37f4ccff148302bb89ce2322ab4bcba511ab4bbf9ee2935dd19ed9
SHA512

d2074947c1eb56ce326bb7b8cf3249003ab6c9096e490618f1e65cce8503efb86c3dec111d9a5f834f46f7d7336775388f3ac4dd51f65e41d8296a7b6768fbab
SSDEEP

393216:earD75rDp/B7TkGKt+I/YqpVgYAKTp/7Sjj8g8yHbPe:9rH5rNdkAI7tT005CG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Read Me.png.exe

Files

Read Me.png.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 17.6MB - Virtual size: 17.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ