Profect[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Profect.exe
Size

405KB
MD5

b93eece989a1ec0086a84573444b4fcb
SHA1

65cecca726793387d2c904054a90277a300b96b0
SHA256

f0a9c27d42e3f77b2f600c5762ffb5db9eafd4fa0a2c2f8e1723d3d40e62da10
SHA512

b89a54f0ae53354be12d3f617b88f43e4065132c35212760c9d7eed305dc0ca24f5319b7838ed490f1598b33b71ef4c99bee5f016e7747ff347a8b739a109566
SSDEEP

12288:PSWJAXfOOLttK/pfdpZZqUibjbA0pV0b:PSWPZqUi3bA0wb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Profect.exe

Files

Profect.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

3)lu
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ