application[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

application.exe
Size

336KB
MD5

c625a0c10f7eab35e055a88285b3b319
SHA1

e452018a33a8290fa79a9503e86c7af82e531f79
SHA256

361b415e122170dbfa20900a87c66ee32bcb918e45cdc7c6f6da99e132400f75
SHA512

852ae24a1f48687459952759f3627404758c170aebe339b71d73477d8f5a8260e20ae2560ac6cc9b439c1b93f8c89bb6330a443ea3d249d03dcb90278b96aed2
SSDEEP

3072:AS3wucKBaPJ4GRSmW45tem+uJhX1P2AVWiFCtlZyLa84/AD4ihCLGHLEq9HHD+UC:AOyJNtj/D+uVP2QPFCNP8XDMs9HHCU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
application.exe

Files

application.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ