Gray[.]exe | Triage

Sharing

General

Target

Gray.exe
Size

341KB
MD5

98633738065af5b71b373985df27dad8
SHA1

e7ceebeeb01969c55a7487c6b728f7a75be9bb10
SHA256

22b66f492bdc66158e2cd53bd9525c49a7b061798cfb6ff6158b69869c1e4d61
SHA512

58fff98299f464124b4511bfc011160214649d6f6e0f7916ca3ceeba503e8b21c8815acad0d16ad7bbeb981c7b5dfb806a3624efaa02d4de927242b911ff7aa0
SSDEEP

6144:IPejBkqrtzwG44hg4FtHvSwnkUrqMbgVuGN1aCTi:Yql04RrqMbgVuX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Gray.exe

Files

Gray.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 301KB - Virtual size: 301KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ