chgpw[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

chgpw.exe
Size

21KB
MD5

c8d3a2b267f1cdc2b6019810b07e22eb
SHA1

59b6b1ed2bb42003a3cf46e33ea3ee055697fabd
SHA256

22a3d6644ca01c8ce75d6fb125d4741ced04ad01e6fbf7433bf9a78c03035b74
SHA512

2df8960607b1b39100c024e6105008f6c6ed103d6c651c19a1a2ffb5125f1d43d773387e5507e0fe8df4d92910bec3d97381ed3c6d56d43ee5a36cf305cad2b4
SSDEEP

384:cX2Xa6JQHH+yh+yh+yh+yh+yh+yh+Q5N+yh+yh+yh+yh+yh+yh+lpSEdu5i3f+2Q:o9h9h9h9h9h9hH9h9h9h9h9h9hmT4UrQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
chgpw.exe

Files

chgpw.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ