ToxidChecker[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ToxidChecker.exe
Size

375KB
MD5

24d8cc266146ce0aedf7b510549b3c2b
SHA1

f405bacff4950dfd5d423868c335ac557221cbc2
SHA256

d672f7c1c4cb92143723e7d474bcd8acc0a418195ebb072dca810c1a83c1a054
SHA512

fff9d655b5597f84b299dcdcd1498a467508999bf44a286483907b5227d5176c5720a09f3d62c7ac3eb66142ffd218165140803ea145a05d8bbf86d92d2eaec5
SSDEEP

6144:n2bXMgh69jp3aE7kbAjkhfg/T17+VN+3:8Y+E71jk5glg+3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ToxidChecker.exe

Files

ToxidChecker.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 333KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ