Everything[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Everything.exe
Size

1.8MB
MD5

b5d720ce2d4d42f30f4e79c3b6139e31
SHA1

50a920dded20fef5ccd9965337c0ef3e2e5847e1
SHA256

be422ec89bff27b61a2aecfc865c7f79a8325ce8a09f44ba2731ecb19311444e
SHA512

2f81adfbed5dd07363fd97e5a070fb8bc4b3b6039302c529710bc4d1738e44a5191bb28b323d94d5877fe1a300b1e40949710ec17f0d5fe047498a24ba4e1165
SSDEEP

49152:UmV6PH/OlIq1UrV3BKYPvjU4T9k/MeMBCj:JVGOlI+UrVxKYY4T9tCj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Everything.exe

Files

Everything.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

[^I\R6
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ٱٷخغ
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ