Fixit[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Fixit.exe
Size

9KB
MD5

c4a3e041f0d57141932adb25931803c2
SHA1

f25c0c7439da61da91f4ba629929a5d18135467a
SHA256

0ca79f60ddbdb52216ae0f3f66102b4d74c74addece6163cd7ec75c1e42ee0fa
SHA512

dfa5cf7a742acacd60c2b1586290fd5c98ccfc1539ad741106c648917eb6c1be60434b287a8c8691b9fb726af77111133744134beb2359024a11937835c2f1a3
SSDEEP

96:1bpBMdmBawqktTGumwlDp8P3uO8yF9l0zPUi3qHkCtoSpAL+oQfOu9nNzNt:1rtyxGl8PeOdXiPxqH9OQqCfOuNn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Fixit.exe

Files

Fixit.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\r1\Desktop\e3\eternity-fix\obj\Release\eternity-fix.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ