Account _Editor[.]exe | Triage

Sharing

General

Target

Account _Editor.exe
Size

1.3MB
MD5

008ebc6333203e648958d4fd2382aee1
SHA1

3115d9a665073984de8b2dc4a963cc3e784a73bb
SHA256

88b3abbfca580a41a129719656faa22e308f492fb414ebef878533dc643757fc
SHA512

c60158987dfb18e53d6e53bce8c18689ba7e0fec7d9f7a74e335e36a8ff0e007c4acd481862882cd920496b0fd1b82e1ff692fd7c4629de21ef5fd30a64a3e15
SSDEEP

24576:9xDVAu0gy5oaV/lEVSL24t4rmbe3Bw5m9YvUkqjVnlqud+/2P+AJcdyFoBkkAne:9xDGu0gymI6kL14rmbCmU8UkqXfd+/9B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Account _Editor.exe

Files

Account _Editor.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Nathan Roberts Jr\Documents\GitHub\CMLite\CMLiteAEExternal\obj\Release\CMLiteAEExternal.pdb

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ