PI -20240109[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PI -20240109.exe
Size

635KB
MD5

0da66ee540197ac22e2ec462ab1528e6
SHA1

328856ba7c13a42acb775bade57685989059a1ec
SHA256

92c2e29583a5387aaa8c516cb90679f79204fe6c6b599d728a3a2edd0d80c6d8
SHA512

62bcfd2224e439e6c3f22a8b96641c89f108068ca567ff2ff2a34ce9b59477a1fcdce3ec0598d11943c36e203516a9d1637bb475e6ad724aef85b0724b572832
SSDEEP

12288:tMGieOww4twi4KLqgjHqDVtGwSzAUQFqg2tljF0K2VU9:q+O95YLqYHqDVtizjQZUFRc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PI -20240109.exe

Files

PI -20240109.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

fmIR.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 633KB - Virtual size: 633KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ