CompatibilityCheck[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CompatibilityCheck.exe
Size

246KB
MD5

d43ed9daca6af693da301fdf420ce347
SHA1

93a5e06c792d05c901501b39f675670b6e669f34
SHA256

475b811cd867cc7b81c3e97b59d89c7da43a11f3db5fbf396f45e59ca433b51b
SHA512

777347e343110a2e1f0bbaac0f1ac4bd9d17f26988a8344b064f8dd3d39c03121c89ddbe8e3aaded9907158b6add7b374b964a65271d967a8620978079d60136
SSDEEP

6144:wFVow6dPTScwf7C5OFLjGtABK9vK2IPb3qRshx:sVow6ocwOOxqIPbpD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CompatibilityCheck.exe

Files

CompatibilityCheck.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 242KB - Virtual size: 241KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ