file[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

746KB
MD5

5278bb428d96fb265678a24ac881bd5d
SHA1

7be790eb4213f419c7d47712040d6db77f3de395
SHA256

618b6b4378c2410372a81626743f66a467d7eaab364cc675bfe0b710a774cd2a
SHA512

b6b680829944ed963a7afeabb09ad92427dcb009ef592e08619e3dd8acb8214282240ecdc39c576a0f1d8e39e0cf35ff80f5eb5e21003b51c2cddcfd26c520e8
SSDEEP

12288:c4CChkPuwwOhS1gqqe6ikvi5CUQ3exoaMWqc1HM+Jq2Rd7BR6wT:c4CChFwjU1gqqe6ikvi5CUCexGIhwSpB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

Files

file.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 736KB - Virtual size: 736KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ