AppData[.]exe | Triage

Sharing

General

Target

AppData.exe
Size

13.3MB
MD5

a648c447cd96d32e1702d470763e65ae
SHA1

37dd89ec51fa0cfc3c3f02cdd55603bcb2ff603e
SHA256

f739134b149d9d1df25eda3732e30e0db92c3c17877d243fdfdbc105f665876b
SHA512

6821e9a8e9eb30edd9c414eba987073e9a8c633556c10263bfa91643394a37f327d7463aacf8604469766212e411e543498df18497d0d47c116b3bf44526f911
SSDEEP

12288:eU+lCO+Gs1KyZ19P+CXsAUQn3zH4avp0Go:ep+Gskyl+CeQnD4SpA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AppData.exe

Files

AppData.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 532KB - Virtual size: 531KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ