Confirm!!!![.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Confirm!!!!.exe
Size

670KB
MD5

b1ab7cccdb47e4b3e87b2c4055e203fa
SHA1

ca27b1b3639e8cb27d82310f95112b5021b8a653
SHA256

5931b9bb54cd619e0e0518c4e61654a3c154b59e72428698ea3f381cabaad213
SHA512

0a6344e74ae9f196ec5c6088660fe201658a1d168bf5795943565613fa358be6c8a55d1410ed76c7ac1b7ba538d4bce4fb7ace8eb00f6928df2a5a238cb4947f
SSDEEP

12288:5ebOcLHhFQd2zjpltAQBmlYTQM+wFiCGZ3wtaqwArx:UVYILmQBmxMJiutnx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Confirm!!!!.exe

Files

Confirm!!!!.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 576KB - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ