x64[.]exe | Triage

Sharing

General

Target

x64.exe
Size

21KB
MD5

47c050a3ff014157a33fb920d26d5959
SHA1

7ac2dc112f921f580217db4f9986ae78b6367a3c
SHA256

f07d0bc14e9c96f2cc2b091c4a05b115d9ccec24088aad9189707b674dbd7649
SHA512

9b602940af365fe8761b05b4cc2c2b09622512ff219b1ee04bcb6179d9cae1630e76c8b331acac489644147c3656eb8eaaefbde1464f6c4080b40c2b298d549f
SSDEEP

384:PkMJNTNbq1m/iECLt7U+g9//Gfs2Bv2eoMRJDBCIwc:cMJpXZCp7+wvr9JDBfw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
x64.exe

Files

x64.exe
.exe windows x64

b4c6fff030479aa3b12625be67bf4914

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.atqj
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE