386[.]exe | Triage

Sharing

General

Target

386.exe
Size

52KB
MD5

0a5cf7d53182d26113ccf6be223301dd
SHA1

95e7ebb570184a6011499ee88f09aaa8b39daf02
SHA256

dee91d6afa6e4a8bf023991ea457888d76fec872969537702f22a10b90409d20
SHA512

6a5351da8b1ec17a38e99abe0a53c07fb356e2a9b1cd531a9e7dc5e95714fad4670aea2b4c02103eaa03938c2afc22b28b710a650e08a17349b2548ee0ded6ef
SSDEEP

768:hHF+rNQD0FtTuTmLGMFi/oMJuE8oeCUqr8XOKrXkT/7LAWB:xF+hQpTmLGsURevq8OKG/7Mc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
386.exe

Files

386.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ