surrogateperfcrt[.]exe | Triage

Sharing

General

Target

surrogateperfcrt.exe
Size

571KB
MD5

52123830892771269993397681956550
SHA1

dbc88089c36093bfbc1249feb71df279d0842630
SHA256

4861231818a4efce13d2a30d44596d2443eeebf95c22e6fd67d6bfb38e8fb1b6
SHA512

7aabda4863b50a1e6a82dbf4ac97c7deca419cf7a78e79fc360342ed42c84ea68ed300fd8217167181e4d9531b313eec83b9bde7f783e67281ef90937dbbbc29
SSDEEP

12288:ubLvAJ7rwSYcfCz6Ljv0kFe2IEqclYhcrK:0ClYcfCW/FzIyihqK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
surrogateperfcrt.exe

Files

surrogateperfcrt.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ