windows_execute[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

windows_execute.exe
Size

463KB
MD5

6dc5d011e112050c60a7327f1ab077a0
SHA1

02328ee841f50096bb6ad004d417722d0f1342e3
SHA256

bedced56c95989dac90cdac7a51116fb61868be0e115bcf58d70de0ceb0c9125
SHA512

9fce0e5e2d4119951d2a32fd7c8a048a78d92c81ad316e4c5e1f596d34fbd1c064944e3a1140204efe0345f506730c4bb940fa26fd47a0f5abf89f8afd2d29b4
SSDEEP

12288:WawUC5h1kC/7gn0T4I9ZxK9Nb53yJnlLwYy+4:rU5h1p7u0TL9ZIXN3e2H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
windows_execute.exe

Files

windows_execute.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 405KB - Virtual size: 405KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ