Microsoft [.]Net Framework 8[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Microsoft .Net Framework 8.exe
Size

52.7MB
MD5

8e99eeb4d58eae9b2ecafad650a2902b
SHA1

7498a5a9fe7c33b44df99de1e2a742b8690ca5af
SHA256

8acedc5e9ec7285f9a0fc5ffd3d2e124642d73a97e8d83c2f01dbdec7081866f
SHA512

a9051ad5be1440c94970f12cba6aef0da9a29892a844665743d9c87a5e5384775397e370196ab3062ce4391d51985ac58b532ae393c549dbce3ae49c7b642a4e
SSDEEP

393216:8Xox2iaNuOxd31veyl9kUbSKc9USV4lF90eZ:AXDuo35eybk/NUdlj0eZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Microsoft .Net Framework 8.exe

Files

Microsoft .Net Framework 8.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14.8MB - Virtual size: 14.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ