Framework[.]exe | Triage

Sharing

General

Target

Framework.exe
Size

578KB
MD5

df3d18ab3304798f929cf38c63ec60a8
SHA1

1275c1d5fb2c58137394408dc9804db8abd581a3
SHA256

9a44c666e5abbd216aaad1d78ea84dba7526b3f613c7f3396ddd1a810e9b0356
SHA512

77e0373495e27e260f069fb06447aeb0313b0fcb7cbaca1cefd8ddb72b08268399b5cc1120aa3d0a623f86990674f41463334eff646792e18a05b06ed3ec0315
SSDEEP

12288:h5n0b8WEVi3Qyq2hC3rJjKhRWjYFbL0x0hjRue6Y0LZt:h50b8/i3QyqIC7GRW0FcC1Ruep0N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Framework.exe

Files

Framework.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 575KB - Virtual size: 575KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ