virus[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

virus.exe
Size

4KB
MD5

0c52b52da5edf0639a6522013c5a45d0
SHA1

7eff9f27439bffa3bd6e3c459dc1dcb3aea9cfa0
SHA256

d3d10b2855a58a5de3d1b3c4890b8ccd9486bf2501b1e6b1f562cce2ab0d7274
SHA512

8fdd811d6e90a9fa83045af273ffa9dcf75cebd7bb64d293bdaa181221e93553b49dc7aa1fce4fbec52445227ece1596819700a3914763860ae0707bfc78feca

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
virus.exe

Files

virus.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ