WindowsCleanertest[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WindowsCleanertest.exe
Size

137KB
MD5

d5afd8ac51082332ee3183d5bb9b1358
SHA1

4e165ae63b30cfd00bc7ede29e8aca75c6a7d0f3
SHA256

f1f40d6d0f2c0bed6a8b366aae303c289f2be5bbd4e9a013190e3bfd079cdbd8
SHA512

6f75f0e64dc5ba547cabeecb9346b271f0d33f2c2b5af41dfa0dae078bab7941a8d2747ca179f82168bcb16c02563afd201deb9353d6408946f81b0c9364ccb2
SSDEEP

3072:dqwqZGjXpoGoByXPQs2UTXQ8yb7aFcQiSIvF68ZJc:dzqZGbpYByPT7lyvIc5SIvF68Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WindowsCleanertest.exe

Files

WindowsCleanertest.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

T:\RMMAUTOMATION-CODE\RMMAUTOMATION\RMMAUTOMATION\obj\Debug\RMMAUTOMATION.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ