Power[.]BIMtransform[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Power.BIMtransform.exe
Size

213KB
MD5

178833f5516b0fef424bb54801d748f4
SHA1

d1c40dcace6c55c9a66019c1e5af13a9ae48d07e
SHA256

3f318c4dcab9bd997a5b12289951b492edbcf65bee33043f1b3dfe4df12dc54d
SHA512

24f1bdc71c09a2b1fef80377969de6696ce0f6613f050c87b2983507f7a6358facb10d31faf9f4710b1fdcc86222dd5c083218273fae3c51b62add8f3eae6795
SSDEEP

768:JQUnu4oZ7KuUAvxIW76jjDQAu03N0Em9b2oW6b2oWOb2oWH25toHp5:75AvxGjYAu03mhqopqozqoGpp5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Power.BIMtransform.exe

Files

Power.BIMtransform.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\03工作源码\02拆分后\20.Modules\PowerBIM\trunk\src\PowerBIM2.0\Power.BIMtransform\obj\Debug\Power.BIMtransform.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ