test2[.]exe | Triage

Sharing

General

Target

test2.exe
Size

7.6MB
MD5

dbbaaa20fcf89174baccd009e8699c96
SHA1

7c2b3f637a8fa2a81863a1360d2a4bf744aff868
SHA256

ea1cf99b9ab7f0a203339fccb86cd971355ea1e6d476ddd8abe46a99ba17d44a
SHA512

fda9c00a037b1f313f775cc047bb480f628bd56b57234eaf48dc5ccc208aeb77f2eac4e031d68e29d80d5ea92ba89c46274f477d65220a7b67cf5c8ca346d10b
SSDEEP

49152:zaA1ihOllptepr1luGD8SiZ3zmQTlsOHcuXEM/mcMEb+t44pUm8QMFS9EIYfunyj:

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
test2.exe

Files

test2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7.5MB - Virtual size: 7.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 85B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ