xxx[.]exe | Triage

Sharing

General

Target

xxx.exe
Size

183KB
MD5

aeb412575c6878dbe2b8dc21e5f935bf
SHA1

93b44123ab08b09a609aeb62ef1f1b40849ea1bb
SHA256

7be8d18d017d5c86c32152dc7275c583ab314f747865a8ee9055b06e0a11bffb
SHA512

5c87aa5ddc3ecf5a01f3be214b7417f2fa3954bc6e304af5d9328e63e00e18ccbd426ba23ed01701a3723b380c22d6ee0e60947a9f3ff953fae49b693135c513
SSDEEP

3072:iY8h9uU9gKkH+LGP34oiKerVUzeeDXbwa21D59ua/aHyvZR7d2iE:iY8HuU1ybwv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
xxx.exe

Files

xxx.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ