PCE-4xx[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PCE-4xx.exe
Size

8.9MB
MD5

8be0fce10615f4c5751171d663f67156
SHA1

f56659574ab2089cf95df0a7f27d79b2ae33c4be
SHA256

9df3f21f89f70ac878dceecac88676578f1a1878cf072dc4c94b99d1c9afa66d
SHA512

e9093e74246097e536100f7811fbbb1f2b233bac0526e1d731ffe9e0fa8fb113dbf4bf30b9c91b1a80206084147a11d6a470edac4338b3a5c1246a2a63d44b9d
SSDEEP

196608:11f1NCh3cbY+VV8+3a4fgt7pYmt1I1Nv8SZWnre2Y3SL/wrkqDdoej9OXbhmz:191NCp+V8GV+Y+1In8G2Ya//qDdXjub

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PCE-4xx.exe

Files

PCE-4xx.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

PCE-4xx.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8.8MB - Virtual size: 8.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ