wininit[.]exe | Triage

Sharing

General

Target

wininit.exe
Size

922KB
MD5

932b776b87e459c404ae7e9ca38a0c7e
SHA1

c2fbe6123feea032e62ac2fa0c56e0a09f2df67e
SHA256

395c0801560221dfb7b4f709c1c4023bb807be25027074ab97ac8693e293b381
SHA512

eb0ce77b848a7911a79ce972cc35f207cd5ab23ad784dbe6981c09d6edf6c42dd9cf65f55457b0f986c0ea25846bee4a8c0f1e365d4d7e54e8a0cf101e1186f0
SSDEEP

12288:o0wNK+LSjMM6I7EjObh43pwlPdO/6jd923a79GNBkrRL74K73wtf2T+:FRjB7a/s23CkAEZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
wininit.exe

Files

wininit.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

})?I6Cq
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 752KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ