Windows Defender SmartScreen[.]exe | Triage

Sharing

General

Target

Windows Defender SmartScreen.exe
Size

49KB
MD5

40e491ab8d1ba28f271fec10c655e94b
SHA1

1a6b0d9c73c9f627ab8ea3d935c11e253040b82d
SHA256

a6b07e531731b6969d2b69b3004f4de7e10e1c27ceae1dec579675d8931a93a5
SHA512

57c05a24920cb8224aa07f55b9c984081bceeea7d0562949c0ad4b63253c5d034f9bcc5f153821df736ea5ad027c65030f5c859ac9b7deb71b0131c264d91425
SSDEEP

1536:CO6UGwL2N+GjaYwoFSDWnlgrBqGRq2Fgh/n40sMNrycY:X6UPiXDnSWKB5RqKO/pPhY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Windows Defender SmartScreen.exe

Files

Windows Defender SmartScreen.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ