sample[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

sample.exe
Size

6.4MB
MD5

a3faa9905c42f46d3966d22914e31ad3
SHA1

2181cbab4c79000aed2e0f485503ac1fa838febf
SHA256

13078600342312935a89e1b5b0c621fc727f6bfa5f0788bcc6a477b92f98a71d
SHA512

48fa53af4e4846dff73647e66df7d860ace2b49d487b31370f4414dcae309c1ed6ca0a733e49dd1d88980d3ec40d0743a2895a2a2479fb1bac92287692ca3b79
SSDEEP

98304:Van+FJVDFaQ9oup+8VoQRWvOi4zVhfwnosvGiiHRqYLO03M:0n6VZaJuk8VrRWvVcVxTsuigZLdM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sample.exe

Files

sample.exe
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 653KB - Virtual size: 653KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ