HistoryDataTransfer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HistoryDataTransfer.exe
Size

18KB
MD5

a69ac19330e44eb1089c54c5e8fadd02
SHA1

26c2f9581ec3e9a42d2d78bd6ed7ef103e83dab2
SHA256

6f40652d4d586036bc09e2d9472d822964885126ddc06fe441c743c20c65d235
SHA512

f7ce518e1cbdbaecd99fd876a14c98f0092aa78c517e66dbe7ea5524a3c357a4103a1dd91c9738c0a8650ab07d6363ea35ab1af1ffa427cc293a6424f9504c13
SSDEEP

192:RKl3cIr38GUwcFrSmEraS5DszI7RWbVh3aB0OMtwFLbJ3BkUYwImCszNNbiw6MGV:xtSmlS5Dszdb73qlHtbCYNmw65MG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HistoryDataTransfer.exe

Files

HistoryDataTransfer.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ