ForgeCert[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ForgeCert.exe
Size

12KB
MD5

c6e1422c3ac711b6f70c5b0816049630
SHA1

828d47cde969a3a9cd71c99cd96f37f2ec438163
SHA256

14e524dbda57c367c966186b1232c9a031f4f49a9262570742cd8c6743468f47
SHA512

07385f672a1f2bd88c7786eae377f8429778fd658e161274aa6cad6d6a90bb8d67a67e6b0772ed2f387873bfefdf56bb9268eecf964fce45b5a0711d4c16c4a3
SSDEEP

192:JfuhyNvoBy08VxqHpEy+/J5aNW175Y2GD0MHlQnm2dR6mx4hZC:chyWLnHWtB5aNWVG7FCRXahZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ForgeCert.exe

Files

ForgeCert.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ