calcprotected[.]exe | Triage

Sharing

General

Target

calcprotected.exe
Size

222KB
MD5

fe7ca5731adc8c850f6fb00bd4885ab3
SHA1

caa28b33bff5190883fc3191ee12eab3244d644c
SHA256

0c2ca7617b33e7507f258f5422272b5c7b37975851d530ed0433601dc18ec627
SHA512

7f802868a010a78b878edf3fde8c01bbc91450a7eb54864737dde0b8ca0cff35ae5ec5eec16f36e7a1e245e05a124602eb0478af130718be5f40aad594594a33
SSDEEP

3072:zfNHGpcEi+8+5srC2Ut0ew1iQvg0KNqC7eAvZTfVWSxze+9eoWvvl4a1h6FGGBaZ:zQmEi+anZ1lvgnNIAvZhJzeBLvvlQGG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
calcprotected.exe

Files

calcprotected.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 219KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ