file[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

848KB
MD5

7dd6a9b9b124720f6319969784a8e1ec
SHA1

4d316dd1acd2614c2e9807bdf2ee4a03e8135c60
SHA256

2147a98d06363c13164eb05dbaa3f4284c765a5e55bef5f15727edd55fabff7b
SHA512

ae8f5b7c804320474efd3c938a9ee7d43aeb3c769cef03d220c198dcd208b0636e4f2a09856bf1d9536b83c74879b15010fc49134880c26f750a32db0a6c891c
SSDEEP

12288:penWET/mr9KRVYhOJjAMmfokcxqgnKmLJtkCKxlo8U4iBWAbiEjdn5Up:pcWtbwKfokiZlCRU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

Files

file.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 838KB - Virtual size: 837KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ