v[.]exe | Triage

Sharing

General

Target

v.exe
Size

552KB
MD5

0dd68e0964829dbcdbd73e617c761ff5
SHA1

41acb284d00d189d89db8d0f45aa1c4ba8003077
SHA256

5c6d1db2638e1bbcc5e92e77e2fbcf10b06cc38832616b83f2ef1409d7e84c77
SHA512

2526166429997f80e5b0887429ed4cc92c195421bbc0ceed8b98a1ea6ef7ecbc4fe4e1616c438c510393f7d126556746776f8961257ad559141b6c5fdd54408e
SSDEEP

12288:xmzlXD1h+qTIj1R+Q9OquFiX8BHRhJmrzRIlH6eSfolEerBEkXgdN05ccqTN9PGh:wlmgqGQI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
v.exe

Files

v.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 549KB - Virtual size: 548KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ