safe[.]exe | Triage

Sharing

General

Target

safe.exe
Size

99KB
MD5

30ea87f9864f53848fe47667f011ed0a
SHA1

52cf72c35631db834ab26743201cf22a55210777
SHA256

bd42b9702dd6caa54b4761e7a6b0f88ba8a03da39c8f3d52b93f466964b16b93
SHA512

36cec0e63d0f91169c8499c022e6a89fe99b85dc04b29a9bcd9a6df0cf9d265235359cd305b23cdf47ae823db3c70cd2a69eff274a7687732bb644d87ef60313
SSDEEP

1536:b4KUgtJjF3pt4bO34PAsYWhcKdjDoCdHQj+l5ju:biUJjF3X4So4svhcOjD9dwj+ltu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
safe.exe

Files

safe.exe
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ