dtr executor[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dtr executor.exe
Size

13KB
MD5

668d8a3f3c0a98b13c642c046546c987
SHA1

5869be62f0c3528a9ef9251d7627471787a5af2f
SHA256

df8d4602cb5013e099ea5dff298b07b40d3a3250b6cf7a0780ab5ec38b062ac2
SHA512

307e3030f0195879514d3cd2110d5d13ed792f01365f35073c16c0a993ec055a3394b0076db383471d1cd18215fca8aa307ff37e5c63b4fc052e0a962d003df3
SSDEEP

192:YL5WxOxYMqQkUNdaLixRqnP/VunlYJLLLTuv0eR5a83ek+Ilzynq47:YLrYMzkmdaLiy3hPLTuA0zT4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dtr executor.exe

Files

dtr executor.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ