vision_temp[.]cc[.]exe | Triage

Sharing

General

Target

vision_temp.cc.exe
Size

16KB
MD5

ebda13cc7f583395d30bbad6ed6370a7
SHA1

2e724017b0a3ace41b3cca9a27ea9efe6d5050ad
SHA256

b8cd82420af3b6e98d0375b8ac28fbab226359a4eb749925317d3367dca3ba70
SHA512

dc0e33202dcea9cabb7a49f7fa35825dd84f2c7ac8ea7f2aa8caf6e5a9deca9d9d2ca6dee6b3fb655c9250de82de1e2e05dba5fc0edd900b01f411c639442f25
SSDEEP

384:T0NktNSIAzjrq2Tjbjlwm2ukTZO3qNAHKlptYcFwVc03K:SkujPDbBILZO3qNAqntYcFwVc6K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
vision_temp.cc.exe

Files

vision_temp.cc.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ