items[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

items.exe
Size

675KB
MD5

865b4fbb11175fe065066b9cf77b763f
SHA1

0a852b66d1d9d577e96c197a3ddddc854d973770
SHA256

69724b5cfdc922ae373f5ab6b8ca15c6eb09c17da6aa6b736010d826fd72755f
SHA512

968582a81a0de69ecec76a2073a55eff1b885158d04dae841299ef046cfceb02efa677f9239db9f2f6025757cd8aa85070efb2e241a03ce6b776d1556c1f699f
SSDEEP

12288:Bin7s9aw3Qciw3ciMeBMc5/7R/Tt2PNsE7K5LK3kNXNmBLbgRePxntpn73:Bin7s9a6niw3dji8R7taNsEm52IMLcgt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
items.exe

Files

items.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 673KB - Virtual size: 672KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ