2297[.]exe | Triage

Sharing

General

Target

2297.exe
Size

1.2MB
MD5

999b7398d63fab9c9e02b314282b3654
SHA1

9a48ee75100ffeaeab59e18ead4a4933b15ad758
SHA256

861e675f529c0731ccbc00a9587655b30e27b772887477f9b0481b516d0dd4a5
SHA512

e945284a9b00fe0ed011b7281a94e8d20613704f2cd894cbb386e7cbbb8c52a64ef8e2e6e1f26b3aa5975a0a8e1344a32c9ff347d387968a9d6008828af3d37e
SSDEEP

24576:pUS6UdMV7c3LGZftqetGQbhflH7nM+8yEKqPfbcRhFaSVhcWl6wDbZHPwLQSeqP5:vG8rPfZU6PqZe9FNk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2297.exe

Files

2297.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ