microsoft rewards[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

microsoft rewards.exe
Size

13KB
MD5

0d181ba17b69fb557d86440eef466323
SHA1

dbf6660583d6820719fce87d0ccc34b9efd478a4
SHA256

94ea55f4ebfbcd44f604653ea57ebe86ff2781f2b600107fd7c201a7d96f88db
SHA512

d8d8d0e7ca59818f1257c22059d8f9b2213d36b9b3007bb14eae25534d09f5325325a3c182a7b142a29539b2cd406fb0b951bfe7d8de32bd966a10b99ace93d2
SSDEEP

384:j5kkIDQNj5mlwGCa9mchzP2MT8LGGN8Esk0fFjMqmfU:LNjOmWzPqJszFjMqr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
microsoft rewards.exe

Files

microsoft rewards.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ