testing[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

testing.exe
Size

116KB
MD5

93bd42f21ad66efe2c768a74a80bf815
SHA1

a3f58e717d5624b77df6e288cec4abdce543d2a8
SHA256

190fd269475a50e43abcc5d70b352e1aa53c416c2d49bac0f9b19726b90bbeb7
SHA512

874420104c9459049021b0ebbd3914c474ddc21bcc7bcffd8a716635423aca90fe993e138bf0cc10308dc03def443bfa17fcb68c98d9e8063bd0e171321426bf
SSDEEP

3072:1g2Aut6gnjScCbFNUoYzbpALvovPTsiKdI:1g3ut6gWJvUxbG6rsi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
testing.exe

Files

testing.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ