578[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

578.exe
Size

537KB
MD5

761f98d3913ef339e6f19d0e2d5a5876
SHA1

b1061f02d3485c964c6d618928e9a0aaba726c2a
SHA256

7e1632e9633e24ba7e9b33ba4e986dcf4509f8757fa4388737b3988b150cce22
SHA512

7a94e10fbb34ebd5bb93031abdf62755431e4864a5a3bface7a9aa0561587fd1214e7ed18a610a0ebd96ceedfafa0d54fe9f71ce340c880da3e643bfcda32df7
SSDEEP

6144:g7lbUhr/oj73JnacwSuA9nZzqNycyd9MRBxBUesUKkmNkqshO0EeNZVBIZ:ghgR/WnacwcnQwFetKpkqsDE8VBIZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
578.exe

Files

578.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 533KB - Virtual size: 533KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ