puttygen[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

puttygen.exe
Size

2.9MB
MD5

cba9477f6c73dd481915e193f1177420
SHA1

47b13b7c8550cf8c628609491eee8a0303831a14
SHA256

1be4551aa3f6e1c1e3ca71c9de748778f2280e45225c9abc439c79d6bb40919c
SHA512

366423c282432887c76f8dc0a57d247212d94ce9cc882c998cef6f5dbc5574eef8de6484961101cba38d690e0736e6ee53bd57756fa0bbb23661c43329990075
SSDEEP

49152:u023gQ0xsd1CNqcd2CTI1DxVrQEVlbHp6yIfpM3HQIeju+U/mm555P2BVXowmm5C:

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
puttygen.exe

Files

puttygen.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ