file[.]exe | Triage

Sharing

General

Target

file.exe
Size

625KB
MD5

842dbf4950551a266d2ae781a0af54ae
SHA1

b5016f862996878b5abf816aff4372420ecddca0
SHA256

905721c1b25229592e32539baf64ff1a2b60e0bd872c3d86e53d8d89d67d03bc
SHA512

9b73c8bec80e5d8fb2f47ec29b736e3d3bbbf77e445e4bd75dca015f65aaabe5db9a8fde8eaf3cacd38e12ad5fed8d2aba0594badef951d5aa50680a8e390d9b
SSDEEP

12288:XasOHMvj6sF+kFpRJv2/WGyWofGPrvDiP8q5iVpKWODKxSAMIsr8ed3K4ENzZWK:X52sTjvSbGKvhYKh2KEA/sndxEN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

Files

file.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 616KB - Virtual size: 615KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ