External2[.]4[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

External2.4.exe
Size

330KB
MD5

6eb5b1899b4faf6cedc175509f19c6c4
SHA1

8dc5c1277337dd182848a58791aa3c1e2422e27a
SHA256

06ddc951600f18f57b057dad79336c7d1fed54b90022691a2982559ea0a68687
SHA512

aee401a4cd48dcc5dc2580d081b372301c2f86f2a4e1d670544948b77e8156a8a2fc86604dcbe74f9a62f725bf1edf4f65d766aba6aa39a4cb82448cacc08645
SSDEEP

6144:6SoBgJ/5bZLp3Ko4a29jHhvQO+1zuCAQwy7KKc6VJI6g:6SoUPLp3qDdvQO+t8mmKJVJI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
External2.4.exe

Files

External2.4.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Performance.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 327KB - Virtual size: 327KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ