test2[.]exe | Triage

Sharing

General

Target

test2.exe
Size

95KB
MD5

edaa2e4ab2915cefec3a2cd6b6c16922
SHA1

654e93751cb9269835e8f5828d7f2446cdc4b1f8
SHA256

ec240d63bcb94c105377dcd6d2a7f81b6af46b2e50709637a1a52aab13555099
SHA512

419d147da99f5501fdaaa30024952c7101d019ad25b13356cd06507bcf0fe7d402c71c9924d18339379bc3f484d2365537abaaa45d28eba597adfbf799baf021
SSDEEP

1536:C3vckNHOVG6NFeAzZt4Tz2+rJyB37DJqVHtO6xMn2n2oGVOntuXAL:C7uVGYf4ntVyRJ6N9+2n2JVetuXm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
test2.exe

Files

test2.exe
.dll windows:4 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ