DRAFT[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DRAFT.exe
Size

766KB
MD5

70c62cb7d39027086aae679528301d9e
SHA1

329362b3d7ed99d7bd876e446341dc7e7bf85298
SHA256

90ce02725d886ba2f6ae19d75257230e7fb80c9d19fa77d715f3e3226bd07125
SHA512

ed68652e4dc34e24bc391b9e775b2cbf4c2438d30de8053d7891f62b9df4aaa02b0e0e1aecc0926d7a4aa4006249be07677be814c3a8ca3b19307d858f09c032
SSDEEP

12288:z7oMSWfDJPhz6NxppCCPHZQURLKi81qdZRDJQbX3wpfbKpVkdKlW1hKqvHiZ1B6:z7oMSMPhz6NxpvP6RX8pf8VkrhKq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DRAFT.exe

Files

DRAFT.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 757KB - Virtual size: 756KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ