PROFORMA[.]EXE[.]exe | Triage

Sharing

General

Target

PROFORMA.EXE.exe
Size

485KB
MD5

af4f474f394a907b0a5fe32c58a9ec0f
SHA1

2711d6d2180bae3d4bebc24583b7312443c7cad8
SHA256

97db943d58a436c3af596f5189c5f45c6303d6f5cd686d059d023d571d9ebf1b
SHA512

8d5302f88899fcb5824d7b332a8f63095dc9baf43320211c98b9b226a02dde9c11383536cb30e2af544c4c458c8951cf9c69c4c50f8bba9c59d56149f9390369
SSDEEP

12288:iLBsUHAeKHYJNeJXKDdZeTvOxzP3W1pgkmiVv:iuyA3HwUXKDSrIzPtkxVv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PROFORMA.EXE.exe

Files

PROFORMA.EXE.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 483KB - Virtual size: 483KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ