VT52[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VT52.exe
Size

164KB
MD5

0e4473ba803017775cdb12beee944700
SHA1

065d8fe07d7780fb1caa5517770989ef4fa0a21e
SHA256

51076d589c02bab40a3664c769564ae29762e46698542b7473f10ca5331a3883
SHA512

194b86f45db06a17821d07788bb53216c1cf2cbaa1921d94a7d658ab332dbdd2aade150b8083ce83592fec506fdd3e931c271a3067986cc21bece5fb10536191
SSDEEP

3072:qZnnBU8Q4Q+MUvX2O95Rs3JHwN/NoCFxleBSUvX2O95Rs3:yndQB/UvX20i3JHq/FXfUvX20i3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VT52.exe

Files

VT52.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\kgober\Personal\Code\VT52\obj\Debug\VT52.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ