FileSystem[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FileSystem.exe
Size

9KB
MD5

c5660db2152c4c78a0691b176f5bb7e5
SHA1

24349c8cdf65d8a294722b6cc81ab8bb6ef65b0a
SHA256

c6fd77680d35b87daf117f01cbc7f6cc13908a9fa122c0252836b09b8c13af4e
SHA512

a2566a1f925bfe7c76234c55082db9c4827ce0953f7161844df5ce8f63ba3a59065bfa78778ee9152321c91914824f1689d6fe5dfd5045f59a3a877f3c59de5e
SSDEEP

192:HMqJk3BiZGv9PzuohaNfX66a2iFxy8VJCM8V5:HxexiZW6oafX66a2uYoJ8V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FileSystem.exe

Files

FileSystem.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\VisualApps\FileSystem\FileSystem\obj\Debug\FileSystem.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ