EdgeTransport[.]exe | Triage

Sharing

General

Target

EdgeTransport.exe
Size

6.6MB
MD5

a5f41c1c052740e8d7e47cf88464a5e7
SHA1

999cfa9dc07961b99ec761c4af7c7ab8f8ca7972
SHA256

4e2523b1f5c580095120fd445bd14c458a350c520e4d063e06d0ba16e9e097b5
SHA512

c88460f24d4cbb69953271c3affab96306ef7561dc2a80c90ee3c83d7bf8a5293de83d96752cb9daff81d47b84594267937692acce1f8d6c2b46e79c889170cb
SSDEEP

98304:nRlkiXm0HdyfbEiS+r/cUmprSuBjptxE:nvkiXmS+EiS+LcUmIKpD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EdgeTransport.exe

Files

EdgeTransport.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Administrator\Desktop\Debug\bin\Debug\SLN\permit\obj\Debug\opinionsR.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ