Duplicate Cleaner 5[.]exe | Triage

Sharing

General

Target

Duplicate Cleaner 5.exe
Size

4.5MB
MD5

7741dd20c81373f5f3f269a9d2a2371d
SHA1

bbe8eb595e79260ad309f78dc04fe24a1537f496
SHA256

9f48431912aa6947e26f5eb4bdd6428c7b866c7d840f35444d87a298c75bebba
SHA512

3b00b0cbfbf2d770a66f8fc337c5482d6b42e248c5b46347a0dc30ba896c1a949a9ed89a02736dd0a2064f7ef14c09d61bd75c014b0aa373d4a0ce6894678da3
SSDEEP

98304:H7oup5dM6hN7gFMlEn1jyXalCFH/ZgxPPMO2+zUZ/6B:HMO5dtBg2w1jQacFHCxPTqZQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Duplicate Cleaner 5.exe

Files

Duplicate Cleaner 5.exe
.exe windows:4 windows x86

Password: 123

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 394KB - Virtual size: 393KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ