291[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

291.exe
Size

340KB
MD5

c28534815053edc83d06fde8f8d22324
SHA1

ba3c8882308e2c425cc7f6fb6e3cbd3070d3b659
SHA256

b52b1b464004eb4701ba53376096d2ffcf1748bd5ac9601a1fe45ffde9a0359d
SHA512

1a51364decfdd4e617dd6b75cde6d1dd16d21d51ad10f9c9ded966a4a64cf52ae979b1b932adaf0d09613b1da255b05fabf6fb8731515b750ab0390b5d10c0f3
SSDEEP

6144:YaacqOI7C0JaAhWoSJcEtELE+EgNbbAVXER/LvW8G7nE:2bbAWbW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
291.exe

Files

291.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 316KB - Virtual size: 312KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ