CI & PL[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CI & PL.exe
Size

537KB
MD5

adf83ea05fe8134c1554b0d9c3c0587e
SHA1

133ae36717b5c79da1fbae8067649df9ae185ddd
SHA256

8efd01e16b7b5df71e84c907b47e98fa8b40700c956547e15a8d05961e6d2821
SHA512

63ffe5cd40206000223bca4aaf287a01fc3e2082c30eb4ee37c2f89570b294a964012347d8a820016d1f8d001da95eecae2f99725bba0ef21b5647e01643b2e6
SSDEEP

12288:PbPhkksokQZu/5Ifw0qNGBoZVhGUxIIOAC/E2AL/KE/1S5qY0uLsJ7n/RwKi:jPIokt5uqeofhtWInJ7J9S5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CI & PL.exe

Files

CI & PL.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 531KB - Virtual size: 530KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ