Erp2eShop[.]exe | Triage

Sharing

General

Target

Erp2eShop.exe
Size

515KB
MD5

8522a330cf03e1e9a1e2769f06eae86e
SHA1

f71d03603383c6e5e5ac116fa93e2a818a4535b0
SHA256

67624119cb4990c681c900a269ffdd436f0b1178525ba55f5a042bf94ae20726
SHA512

73271a55c3cccd4e39867cd82a30c8555eef966f6da2506aa48174ac355cb1de92ad41689d4b2afbebdcd12936901205fb087be605f887741a05eb8e6f92cc6c
SSDEEP

3072:s7kMk3vUxkxMs4KCGxoI08h7kMk3vUxkxMs4KCGxoI08idv4xsoBfa7kMk3vUxkf:WDv7V8Dv7V9dv/Dv7V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Erp2eShop.exe

Files

Erp2eShop.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\RD\Erp2eShop\GekasAuto\obj\Debug\Erp2eShop.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 353KB - Virtual size: 353KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ