HeadMatch[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HeadMatch.exe
Size

24KB
MD5

22c6792eda43349d7a22b41d1eb357f4
SHA1

22c4e11ed01ea242265d3736a4fd4a0144e33c9e
SHA256

d0f253d4f2ec888c381b24cd0510ad1aab2e36c601fd0761c056bdb2e03b6c6d
SHA512

aede577b96813ae89ce368317434bed566fe32f409febbe70e70ac9633637d0626130906641b1df0b63fae0d3c3fb481bbb195353ec8af51876cc18ef19a2127
SSDEEP

384:XelFhTpIrTL4g6KB5H70A6BCEDdx4H2Chgmab0q3lDDt95LyPHSdt/RQEz6lhP0L:cNpk3BP6V2HSdfQy6lJm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HeadMatch.exe

Files

HeadMatch.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ