decoded[.]exe | Triage

Sharing

General

Target

decoded.exe
Size

593KB
MD5

7c9cd1b84618c07b8d7c0594a5ea464c
SHA1

cae6d9803dc10e3efad5056b74093210409f5a2d
SHA256

66f0e5832dce44ffe2956817c229db28d19e630433b3de0e6914403192f706b1
SHA512

d12b9b9b19d2cccc1b4eb287ec859b99f43bc83e0f97eb1b1baf4340ad1bb1202ac6d12836249bbf3194f83d79b97c64b89bc047308e522cf7e1ef3cee00444a
SSDEEP

12288:mwWLPtSHW6Edo+H88vwkJJk2xkmxxZepS+rwv0WJaSkq2WV4zhHfBmMu:GtSHEdo+c8v+2l0M+rwcW73FOaMu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
decoded.exe

Files

decoded.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 590KB - Virtual size: 590KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ