new version[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

new version.exe
Size

3.2MB
MD5

742b502165e6ecd0e2fd851e11207308
SHA1

080c3ced6966fea04851f9e138ee993a134dddde
SHA256

bc3bf34ebce7fb8b4cfbef344b878ab6187713e9c72cf85f26dedc587144e336
SHA512

4f03847ea7a7e9f0bb32ec5e7bf986e881d948695122c08ec44923c0ac065aa55689b52004ffdeca8d4bfe686e91d247076f068fceae9a604d6ec0129edcc6f1
SSDEEP

98304:/G6M8wf/MgLW16DD/Ypveh2MgCWvNM0KLPIRa:/G6MVMczDDApv7MdWvNvtQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
new version.exe

Files

new version.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ