msf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

msf.exe
Size

5KB
MD5

e531912241a02b476247dd62f3711acf
SHA1

ddce934f4d0bc69f12831bdf9acd98d5d57ae9c0
SHA256

f13c2263ec0a3839628eefbc5227533c328af3d54543e7dbb32185806149c3da
SHA512

4f24bb7913fc506b2d0c8b272f74bd4f510c612b428a62a620ed3695b7df266078b45fda8772d42eb65aaa489fd5a836edf257115d9d2a5ce9e29d86705ddc30
SSDEEP

48:6f+acY8Xa4YEBqJ/0odlgQriHryCPiSKHVIEUOsq6epST57+lP8FeZ+LzpuOLlzW:kDrGRYX/0oYDiSq6+tkid8FeijLlyR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
msf.exe

Files

msf.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ