MTF~039837653536-PLK-PI[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MTF~039837653536-PLK-PI.exe
Size

705KB
MD5

694da675a85007447001d277dccd2759
SHA1

625e484b136494d21a267318734b3fe947f62c51
SHA256

feb22e43eb6a3d5e134198364bdbd80840c3ff349dc5d893d562b376ed147a7b
SHA512

9c52698582dae1fcb279626b7d35fa2147866fcb4210722ae3b5d4c08150ccbffa84d262ecde5617d9581442aaf40880aebd8b90da871e7c72c14281c413c67e
SSDEEP

12288:004slBfJw1UjlD7wU89+FBVr8A5+moq4jGjNkfPw3at3l1ml8NEfJ:pBwCUSl8Aom1GzfY3atV1ASEB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MTF~039837653536-PLK-PI.exe

Files

MTF~039837653536-PLK-PI.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 695KB - Virtual size: 694KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ