ZBrush[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ZBrush.exe
Size

40.9MB
MD5

69bc86d5a50015d1928f1c02274f0117
SHA1

c65a56c8f93dcd8897c7bc0483df8ad0290c33e7
SHA256

a9fc44c7d844fc315fdd408517c5b891189be41ef26382058273344d6bec40d9
SHA512

0abaeed339acb7a053edb2f8e7963e32f350142dc066e3d17cab602332d05782612e7f4f274a0a506348bada1cb42287b5f6a83994aeb83a16f20b06fdb755fe
SSDEEP

786432:KcUYEmpqlqiiRnZN+YkCxMvSQJk3PfenQwkZat7L+UYsctxC3Gb:KF2jnxMFk3GdYscHaGb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ZBrush.exe

Files

ZBrush.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

....
Size: - Virtual size: 434.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

....
Size: 40.8MB - Virtual size: 40.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE