Proofcore Support Tool v2[.]0[.]exe | Triage

Sharing

General

Target

Proofcore Support Tool v2.0.exe
Size

1.4MB
MD5

a9d1abe918bbcdc0c6eabddf2fbc472d
SHA1

1b57669b84ad1d80e88021fbbe7ff4fa0a53c2f1
SHA256

54d76ef4adb7a671d6b9d8a855f9e4c31a7962c17d592100a0952c2589c95fb7
SHA512

2b34aaa74f6ebf3a04f686ffef28223086759f56f8c2496b99e858afeca11fb53db9b5eb3fb7db0b693f3d45f56f7998ed59ef0f8fef2b91cf7aa614427fa460
SSDEEP

24576:/d1fiuifVdplgoddQ2gpcSGTSl5iOxYhJUeoUJi8Ktp9J0/3W6L:HfYN3lgyicSOVJi82N0/W6L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Proofcore Support Tool v2.0.exe

Files

Proofcore Support Tool v2.0.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 284KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ