X[.]exe | Triage

Sharing

General

Target

X.exe
Size

53KB
MD5

3385099bda044d397ab82cd0328312d1
SHA1

27e8c32b275ae1e75f22e85fa0540d3c7643963e
SHA256

60bfa784c754d4bd94b5e82e1ff907f9cdbe6196064b2bd978f38f9fda043bc4
SHA512

8742e8fb16d467acba74aa6a91b1b08bd5b0184347ac57d740adff5b2753df7c845ed79191f3c902d68c1fafe38aa1ca021e7082a14a248c90069fac2d3e96e9
SSDEEP

1536:cpIaHP6IH71EM1f+W/lNz9fdO3d1UUYLW96:6Vb1nf+eTzddOHFYy96

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
X.exe

Files

X.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ