Leaker[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Leaker.exe
Size

255KB
MD5

1c0c59dcb8bfed659ea44268f91937fe
SHA1

6f0f634542d1820436017e8aefe7210115a476cb
SHA256

c0dd2071bf5cde1d5250c6f83ea98003d18aae008afcb5e969e9a2a47c8314d8
SHA512

b1268af73386eebaed2f367b160832d54164b79d321e3f53487d30dc3d1e978ab77116c64035cd87a35ae70f5414248566bf5625705cecc22fd61b4a7c7a6592
SSDEEP

3072:K0YvUy40UnJIyKWs9VpSgz9PNFEgdRUmbBVAtZ3XLZ/Y:WvLaJRKWs9rSQNFfRUmbot/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Leaker.exe

Files

Leaker.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\J\source\repos\Leaker\obj\Debug\Leaker.pdb

Sections

.text
Size: 250KB - Virtual size: 249KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ