file[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

2.5MB
MD5

c0d2d20e9a04a884a5104c3e29560cf6
SHA1

53190dab0faf8c7c7470fbc5c22c88c67abd98f9
SHA256

a05890b84b67d77df161a9f8fbd636c09db2081d89ea2d36040fe5d05df2b555
SHA512

4eb7a48a6da2dbfe8501f9628adcd424578317fccb918609e4f5149329c2bc55171a2c2a22f7cd3a3872d81705b7c3c0d81209a7800ad46af5bcdf532dfc1aa7
SSDEEP

49152:Yu9ciiyXnHVT+/LgeRgQUyiQpWuACDSvmCaTluwjIQvUGvaN:YuSbRD6+tnSxa5DRvdv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

Files

file.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ