10000_reverse[.]exe | Triage

Sharing

General

Target

10000_reverse.exe
Size

202KB
MD5

93a3cee4e5db116364dc04d766376857
SHA1

8169d49b440703bc2952ebc2d991980dc074eff5
SHA256

034dc8aaeff2ce1822387ac77f4407b489f35cd98ce709861f48716d23dffbbd
SHA512

6b1dfe1255dd1a2349e477803bbd4c5beecdfa3d8ad44bdcc720f2455b890f4f4fc6892e3c34cecc723b1c257e070657caf1ce09de9bdac110b9751fd6d08df6
SSDEEP

6144:B8tYebHJCOR1MXTGeBEbW4mO+ZgjjyeL+:B8tY0HJhR1Mu/j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10000_reverse.exe

Files

10000_reverse.exe
.exe windows:4 windows x64 arch:x64

b4c6fff030479aa3b12625be67bf4914

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.erbl
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE