to[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

to.exe
Size

614KB
MD5

6dc33ba531fce8c8ee24585f48d14297
SHA1

ebcf11b40ac7087e9390a63968928b2d09e1678d
SHA256

c450f93d63c121ab42dc4b8978eebe263e53530ef6107a461f68f7f2f2f51cdd
SHA512

610c85c99f931ea5fdebb31743bea9f902eee5bb27a8c3708266018116079afeaf2b56f3fed99ed8513b619ae8b34458536234a5875db4cf0e7bcabefce96542
SSDEEP

12288:GAZs5aKLy6Xnud0CeCWchG5KLJ4QG/y/sp0OwwyQm1AMCZWMqw5OD:eXr/p0iyh1A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
to.exe

Files

to.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 611KB - Virtual size: 611KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ