explorer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

explorer.exe
Size

117KB
MD5

8cf78f1c724aa8653a066e4b08c403ce
SHA1

89f4d5e9e8a88c5ec37fc7e7345181937d911252
SHA256

ecfc8d5704421029725ff73b8afde72e7ad841efbe836fb3f051683b3b8554a8
SHA512

2a20af70e6411ff5abd1e7bf27c7096a2cd7a140b5a22ca4f5c41c8b7ce0e4f8d9c23033024700624a171d930b6f5213eb3f98a0918f534ebc4709102cfa36ac
SSDEEP

1536:NfZ0UZFlOqSxXjXadASVm4v+bPJiZcT15iMnIK8OiRJzs:9Z0sVOjybQ6+bPJiOYMIK8Oinw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
explorer.exe

Files

explorer.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ