download[.]exe_ | Triage

Sharing

Copy URL Twitter E-mail

General

Target

download.exe_
Size

246KB
MD5

5b932f01916859c318aba59c4a579082
SHA1

086cd42af210f4ca7ae87f97f36fa11c33469b48
SHA256

a9e8f9ff6502a20b40f6e5544e5eb4aa93d444702ec7d51b2704039fe687d073
SHA512

55c70ddf64719f5c4ed503e2dab224c9fad6153b7d69a6f2cd854c4c4d9314aeb65e47fa091d7e58b6bb63e556d5779d47c5bb98a7c9523972e6ac92cc4c39b1
SSDEEP

6144:QG1hJhfk0j62FRVZXAQyhnjTZ9omsNgTEs2L1:R1hA7U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
download.exe_

Files

download.exe_
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 243KB - Virtual size: 243KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ