build838[.]exe | Triage

Sharing

General

Target

build838.exe
Size

370KB
MD5

baea8727cf8923018d8235c66ae8d6a1
SHA1

42750ff80df0ea75d1dc27484bb6775cf8065003
SHA256

2d37d22eceb8632c2d94f155e17db628125d658a336e79725d757d13b657dc5d
SHA512

b9cd9cceeaa618395dbf486c83687b0a922a29734d5a3d463e3bf1143345416ad4e985184cca03ec59a7c5397270cfd2e3ebd06b620a2746642b17dea2d34866
SSDEEP

6144:mMZ+4tD/t/a2zDGVPJXvnzZjDJHb571Kjn1929XDccHOL9bqY4S6X30/Y+59Y:T+GRatpvnzZjDv7oj19yTNYVwEe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
build838.exe

Files

build838.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 367KB - Virtual size: 366KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ