file[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

637KB
MD5

9c5cc586392b2b4ab395659480696eda
SHA1

8c95aa0bdc3c0d4c06359e608931f6dbd42828b2
SHA256

605350df32f075d34dae4c671714c4a7c4666d50874feffab6c0e2535f020115
SHA512

8000a0b5d1fc94c2d59757d7443badd44d9c880ec492561bc35ce761ce07b9cc21888de90c2247c528db1bf5c5a6c7d10975e033693101cc3206b40025be4c57
SSDEEP

12288:uhx6jhKgpINJG46y5CFlC7ccum7dhtSwCSVa4dIiNDIK4ENzgK:osdK3NJlNo6ccu6htSinPDoEN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

Files

file.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 627KB - Virtual size: 627KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ