p[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

p.exe
Size

26.4MB
MD5

2058341c87ba4adf867168d4c9f9546e
SHA1

77c09e768576e9ac641e833005afebe9d41f65eb
SHA256

61b9f130a21b9f57ecb71c4427d15ab9e7e73250e6477862fe51e70cd58d66e3
SHA512

d69e064ca90c770384731391a1239a5d7c6aba5c25ffdcbff866dc7f35fd4cfd2a39b9f097b8fb050c0c8331ba28a8a8d8c0df5a2d2521634552ee59eac5d054
SSDEEP

393216:uPdxQiNiMXgLwMvRIqob4MHPEi9dQJ/LAJVb9eDaeWYo496zPmneATQuv:AxLMvRVG4GC/L6Vb9kaVu6LLA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
p.exe

Files

p.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 26.3MB - Virtual size: 26.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ