file[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

736KB
MD5

19b0d7c384f72f4770aaa5b7b249de92
SHA1

290cf7ec80c5374fc08844191748af7145884fc6
SHA256

7aca6825bcc57d37bd12f4975818ef6fb846766a335c1fd5f79b154d4ea89842
SHA512

2500d635e6a15f599e65fcf1bb967e15b6f73b069ff16cb19c7e7551de89b5679c4300c9387a323eb2485c4ce82d2d7a914f1dff9c6fe8958ad07de141749f74
SSDEEP

12288:KPReLAfP7wDdcJvJ2td+sxQKkgCn1NzF2dEEuIDNo1rj3b+qfWh/viVtoW3l:2537wDe2tEsnklNzQdEjIDmjLLfV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

Files

file.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

jfXn.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 730KB - Virtual size: 730KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ