Corp[.]TrustStore[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Corp.TrustStore.exe
Size

6.3MB
MD5

886d701827646a4f55a831a4704f3924
SHA1

e088a3ad01aef692602d0edb269ed9da1da01d2a
SHA256

3f13c1f2dbdbaad358cae47f9f893d2e3329231c3a352d6f4085032af8457340
SHA512

964b20ef17ff478ffb89f28fc77c3e11f6c67c766b4a37910d7b6b7452a2ea36cecbae0e3ac1d98bd7564f2bf874d93a5e4292af237a09e73c560315f80c15c8
SSDEEP

24576:57n/C6PkIf3aGDuZo2VECxR8M3gPmsgUhpLg9K1KQeF:vkWGRBupc9K5eF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Corp.TrustStore.exe

Files

Corp.TrustStore.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 527KB - Virtual size: 526KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ