procmap[.]exe | Triage

Sharing

General

Target

procmap.exe
Size

13KB
MD5

0c13dfbc137a3bb4cc8da0b6301e9468
SHA1

f2ce29eed4c9f219dab415cf6729ee06c8fcff4d
SHA256

ee8ef58f3bf0dab066eb608cb0f167b1585e166bf4730858961c192860ceffe9
SHA512

e9343db4f416b4428745e57e47626e7ce52a21d0fa904915554fd900bab1b26d49d0f77b74bbf5404ec898b19af2287cdef3ed6b8ccf50760767eb3fc204a895
SSDEEP

192:QtsHSY7oXixkjdJfvW05QcXGDgvf0FT10mMejkksJ1L4NqZ36hrgWZdcFLG0F:QtYT7KoYW52X8TGwPsIN3LcBF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
procmap.exe

Files

procmap.exe
.exe windows:1 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 9KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE