Hasher[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Hasher.exe
Size

7KB
MD5

5abb011d01a93c839e664c1bad21d0d8
SHA1

ca284c1ca08e230a35ae8e368a8ea73f67ca7fce
SHA256

d3186047134eff96c3558c2de6276e7f0d313e0801b3091d83c8840be6e9a88b
SHA512

02bb028e1f2f9a420d7da6d884fd94203046d8d28b4ff3a2b7daa72c2998a9a6511971a6989c6f2da920249765b47663c20988634f5f697c2d80f8026b5c5e9e
SSDEEP

96:bpTRW+SvO4LPnELDZC3rSiJRvyjZ9ecaTEvoP9UrMNI40bzNt:vgTMLDZC3e8s7ecaKimrMNA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Hasher.exe

Files

Hasher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ