Windows[.]exe | Triage

Sharing

General

Target

Windows.exe
Size

700.4MB
MD5

83334905c465eb76d437ad3a52eb5050
SHA1

3537c9d40e63bba29bce8056746de556ed0a8eea
SHA256

8ceb1edb1d8424f9d05a23f5d1410eed9a4ac63f0ec18ad62a82cb654fb45a8d
SHA512

650b91d81afb6a80584e4f243ae80ac12d59963b5afcad86c8fd4206c56dceec2f42a6a94b26e55d79d109f6cd6061e97d4c48945febeba1085efbe81ac53bb0
SSDEEP

6144:io+LQbpY1c3hJKbcxghqvIf8Ac/qdBhLGGGJzm8Ul/lxj:yqeNc2f8AnBIJXAD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Windows.exe

Files

Windows.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 308KB - Virtual size: 307KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ