Anti[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Anti.exe
Size

23KB
MD5

a21d32aa5073d7ccd8a7bc87b1fd4fa9
SHA1

d5d4abe293934cc6ad93c94baa31964132358dba
SHA256

c98367ffbaec6e84c07efce9d80eae1c1b97cf98583257f16229a80578d500eb
SHA512

09f87db37ba4f406885be9c3812e3ed04fd836d04a8c6eb0a79e0fce34a435f660ab63d26badfc3c5116c4bf6243ad19e72aa9a2e674737ae49a07a1abff2ac9
SSDEEP

192:NhVFyr1bFd2lOIkVOAbvZm7nloYk4kNIDLR7PYoRGZR0bKxJd:NhV8FgOIkcAbRT4g+LRVsREKx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Anti.exe

Files

Anti.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ