INV[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

INV.exe
Size

715KB
MD5

fa85e1ebb8851f969c4e99d35264890d
SHA1

4e0c0a24148a6fa43ae34f8aba2aeaea35921162
SHA256

a1018f6e1828a26fe95f6a0c4ef3b1b55b13966fbfd11fecc41a1b295457253c
SHA512

712b3fe299c5143d633c395d8225173f7231c4f15f79316e28c2ea704c10d29551b99d3de7dab1b04b28281aa6abde1f0af8702d926a900f0235e7c562a25689
SSDEEP

12288:TqRZHn/V69yqL28oSwMkTJAhg5lY8EM2av749GdXjY+94jHw3G48IS6YtzLBgUuI:TqRNnt6XyLSK5KM/v749GdU+qjHwWfIE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
INV.exe

Files

INV.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 709KB - Virtual size: 708KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ