s[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

s.exe
Size

255KB
MD5

75f6ab51484a203c240ed30e4542c02f
SHA1

5e1db326cd652570ef52d8e1eb971374211d25d9
SHA256

3bc3c50048fa7652f85b034fe077797b8015c5ce0535a4e11013a08f58958e90
SHA512

f6aada6c2b84b893ef3fc4b00199b27dcb0ad3e31381dbd3ff562f6b8ea6f31e77de49f74e40a34d8cdc22ed495794dcdc60d230558ff63ed2a6e141e77877f7
SSDEEP

3072:15BtYkU3oINnU0L5uSLt+FZh3OEHBAnpK37nX2s8cO0BSQ7sD74tyJhkMKh03UtN:7shNt+tis8yY9D3UioEos1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
s.exe

Files

s.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 253KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ