PI[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PI.exe
Size

910KB
MD5

ae0360043628a1b689420ab9f3f1cbbc
SHA1

e2dfd82ca607362544b71101a61f548c1ebe0f6b
SHA256

25bee31eda4859c5264cc757168bf142c4ca6fbda261a674f1b787f3d8dfa9ac
SHA512

29bea02ef384ab98fc683acfb0cf54a6dcf4fc0fa27cbbd452ae79ad9f4bcc5e4d80a3df1bf8c87e29ac61cccdd7a6e79aa056ca90114d37a57a4395a2ef7286
SSDEEP

24576:lj4m9wPIIpppXpppppCOopppXpppppCO6wGw3sHUwjCDC3iopXyxqv:27IfO/O3rwjCm3Lr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PI.exe

Files

PI.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 908KB - Virtual size: 907KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ