PortScanner[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PortScanner.exe
Size

169KB
MD5

d442298bb22b828a5eb966966b294144
SHA1

a3de27af63e986b6a7765b589878c19e58b0c08e
SHA256

d57dc46517d92d3e49720f5d906232055b7fc21f0c511ae5075a15ab9ad3ea34
SHA512

a19a3bc2822b7ca951fa4ae1488c13908c0dfcd409af10418a8fbdd84ddeb32ff3db47ab30a9ae97fe67bcd3b62fb44fc4a48fb1180dfe35b369f83d1f161a67
SSDEEP

3072:MHvRWxQhlicz6IhG/2tOI2yiWnElF+dgLB8HQ7x3Dbq7ZEi6PVERWxQhq:uJWxIsW2jg7bWxIq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PortScanner.exe

Files

PortScanner.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\My Scan Port\ScanPort7\obj\Release\ScanPort.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ