test virus 10[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

test virus 10.exe
Size

98KB
MD5

a06b8deadb6ec6bc196918c2de8add3b
SHA1

1e043c93effbb18b695b21d3507bbce501726f74
SHA256

09f574531e792d7611734af72e8fcae407b8d65cbaa55def1a9eff6fab95535e
SHA512

f2e3c63560c99f12bd24b5bbac586acf75ffd4ab937e97705aaabe76cbf2d4466891e316868688823ea92ba4da1339b275c411a01a42bd38f5ab94d0fc7e8000
SSDEEP

1536:BbRFndGA3mhGsOH6dAUaPQ4EXJ6EipXy9FMXsGjB+V7DQ4X63AsqiGwHak9ireY8:BjndGAYOMrXni52F47927ogw5aI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
test virus 10.exe

Files

test virus 10.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\TOSHIBA\AppData\Local\Temporary Projects\WindowsApplication1\obj\x86\Release\WindowsApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 162B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ