Tracking#INV-IV1905-029[.]exe | Triage

Sharing

General

Target

Tracking#INV-IV1905-029.exe
Size

681KB
MD5

828636842c69b4e453f5735e77c89d36
SHA1

b1c928ed1f9926fc64cee98be211a5e77c9551b5
SHA256

1d2add4e6e6f86f45aa1a4b75c32e4efbf43bc117cc5b3a3927b4e548cf2732c
SHA512

64b8f4ad28fd005936898e4fc244c8acab8257e04a033459a8b463fb5171a814ab20c7d5933577ef10562b8adba35eb4addd1060d1f18ce5448cfeec32cdfeb8
SSDEEP

12288:OaiOid7BR6wTuHfH7eXkhH2iRr2nILMUrniYqW3WbKLrcPwp9euwjz8lIc2pvBpV:O1OipB+H+yR8VDvW3/cPwL3wj+i5pDmv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Tracking#INV-IV1905-029.exe

Files

Tracking#INV-IV1905-029.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 678KB - Virtual size: 678KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ