evil[.]exe | Triage

Sharing

General

Target

evil.exe
Size

1.5MB
MD5

b09466557917f41e0cf71e5a1c2b727b
SHA1

17f076aa0cba84bc2ec48073408c870df5b3f728
SHA256

508a6847cc3c2a81052ee31d211130f367a52c1ef61d98716bc9d4c5571ec48a
SHA512

e40084d5b3c509e3e0665d7f94e851848bdab9bdb17d9b566368aac6a27bf3472fa89f41fe9dd6d2bc86c8f443278cea9329755bc6876a672a4dacbf2417e49a
SSDEEP

24576:g+35PRhVY3d3+bl3peCvU1br8h4l2CPdtqvVXUkrfj7rnPbf1u:bR80Le8h9hl17

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
evil.exe

Files

evil.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ