Microsoft Toolkit v2[.]6[.]4[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Microsoft Toolkit v2.6.4.exe
Size

56.5MB
MD5

d77b38f887a7d6b842d05ada38a57bcc
SHA1

2b6d05f9cde75049414433994ab5482c2795086d
SHA256

99130c7385dfa35d791c21c678d1bafc009284b345261eebfeacc3baf11b1bc9
SHA512

78e8a25c5442d6619d8de81a39bcf3307acaaecb7d52aa6b2e0c24fa7b8d5897957d8bc3f4e54cb2391d3019ee203bd2e08121c852ed2c6bea4531af86a02870
SSDEEP

1572864:jbRSRkZ58dTKOx+GdgLf9GmEdfoe3Qr1BXhN8Jzy1n:jbRZHGd/4bizqn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Microsoft Toolkit v2.6.4.exe

Files

Microsoft Toolkit v2.6.4.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 56.1MB - Virtual size: 56.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 366KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ