userinitwin11[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

userinitwin11.exe
Size

418KB
MD5

216cdf959a74df803b8dd0065a0b7b4e
SHA1

8a6dd8730239062a7841c1f43cc6c3063f1a8f90
SHA256

f63d001f5e1381209970185e4c8443187af95d938890a4122d0ece145e7a48b4
SHA512

368556b088b64243ad0fe42defd746d775b480b423877bc346d45a8e2eb92c9e15c49bd9f832877abd144c4952841337444ef5fccd5c6e2268dcaea74060613f
SSDEEP

6144:qbWdyCIzMEZ4DQ0SsG4NGHT5PzBobrdT0GHT5PzBobrdT+dyCIzMEZ4DQ0SsG4vq:ilzMKw5GzBlWoGzBlWtlzMKwe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
userinitwin11.exe

Files

userinitwin11.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 326KB - Virtual size: 325KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ