CI[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CI.exe
Size

935KB
MD5

d37fe27e73ac9955f456e05355d165e7
SHA1

e7b4afc8c5702041f3e0836867b04d2972dc926b
SHA256

8c414fd23baa45985fd610990929794b1e99d2ea6054b0ad8b95d2fc2ceeecc7
SHA512

60c2868fe7facb302c0ed0eceeac8b281a2136016532b26cb07c2e3452244a091211eac6e74946d4a70b15d17f8c3e748e4cfb82971399adf8b9d696e07dab24
SSDEEP

24576:fkpRs6CE3jLMpppdpppppUO9Rs6CE3jLMpppdpppppUOhUFn0iGJUYIN27XoL3EX:fORs6CE3jLbO9Rs6CE3jLbOhM0iGu2oE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CI.exe

Files

CI.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 932KB - Virtual size: 932KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ