file[.]exe | Triage

Sharing

General

Target

file.exe
Size

2.8MB
MD5

9cdd56d9acd9b190ea7a9eaefe385202
SHA1

5e5cdb5fe5859a8b2da327f045ceb8063dfb247e
SHA256

a12ac74e4555847e45eb599787ad86373d8fc7bb39b63550f65ec8d729bf264c
SHA512

3ad0f21e5b8fd182a4e421bd4ff073575fdf1942261f280dcc3f91360769f25acdccc5c2e9e38cdbb137892e4da98e2c9ebc8ed4a17dda792681e60b6e59bafc
SSDEEP

49152:Ka13CXFUnRlf2xe9RFFFuRBWV+fZphEhFeMPd5gz8HEiz:z12F2RZJFniWV+semUz8H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

Files

file.exe
.exe windows:4 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ