pztrain[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

pztrain.exe
Size

17KB
MD5

d48ad0841a92b22309a140da60e57d61
SHA1

6efa47234c4e1a016a4c13cf1c282e875948e249
SHA256

5220752136892d65b6b9d31cbaa5505d304d22604ca752ace1c478734f4e947d
SHA512

3f7cf95d49a93346dca319f32edf2e6a0798c818530828c3b3229ae0f6a69fb8a2b367f998dcf02a1bee4d281294dd164bc356a73e552ef9f09d2d126847100a
SSDEEP

384:TDpWgQEcukpWYDPhRXTEeNfxrE0nQq7v+kV:TDEgxr+/D7fCEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
pztrain.exe

Files

pztrain.exe
.exe windows:4 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 982B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 436B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ