DumpAnalyze[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DumpAnalyze.exe
Size

1.4MB
MD5

492cccc172892fb37bbe8e59b9a93908
SHA1

3832d77d0d756df652816bd71e86b4df8ba6738b
SHA256

7316d8dddc5f0c30c44610ff74fef396f7721c3dfdedf153ffef5ae3161ceb8a
SHA512

d1c48b5e30dbf730d8e9041e6dbdc914c9739c2a48ae5eeebb6f808386b9e2118947a013e57c7826342f6a343289b046d9d8b4a0f09760527aa59a06a377b35f
SSDEEP

24576:lrkvqnpQUdc5DjFqL5UnSRNyYqJJb/Vr3tiprMJGJgF/2UbGuvfKShVqtTwiKKT4:mjFqL5U6Ixn/VOrEGJ1I9q+iKKTV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DumpAnalyze.exe

Files

DumpAnalyze.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 203KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.Silvana
Size: 352B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE