Windows_Repair_Toolbox[.]exe | Triage

Sharing

General

Target

Windows_Repair_Toolbox.exe
Size

1.8MB
MD5

95c3e2e026be2fed4bbb00837f19f7d7
SHA1

3a2d19f6c62927e6a260bf3777912818b9523d4c
SHA256

6cb95836828a257590e9800c49b6968bdb02e21687f16c9539f020f23ca3c159
SHA512

b7dc4f4fd4a00be0221d85f1b7ba61b6ca6b50ef9afcdf726041a923045189272f74016635b17062dcdd213e975fc87d22b57eb3941115a09c8616040089cfdf
SSDEEP

24576:BG+jgEM2aFCqBIBwvKWVuxmLbK33dupR7cvB+PnchufixdjOVj/ECCEqxO3PdxE2:JjpeUqBI2vmaiZP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Windows_Repair_Toolbox.exe

Files

Windows_Repair_Toolbox.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ