virus[.]exe | Triage

Sharing

General

Target

virus.exe
Size

594KB
MD5

7ea9fc6d0e8d04ee07586637436d671b
SHA1

0579215bbccb037ab0ab88bef4aa14294e05d1c0
SHA256

019e2b6dca8adf8dca5162aa2a91dbd409f2361872875740609f7ec2fd4b24f3
SHA512

7a1aa0cceb4bf5becd034d6d31c1773b1a07cfeb0b0145048485c707eb85f654a6d39fabd92ca3c2bcb8b0bd07483cdc1140339dc19cbf42e9c09b01ab1263ce
SSDEEP

12288:d6mw0g4GCb+5rPNvckhmt5MFDX9p1wWjVbVhTbQy5DCD4:EThXX9p1wWjhTbQIG4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
virus.exe

Files

virus.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\SHAREDY\Documents\Visual Studio 2012\Projects\Patcher_Letasoft_SoundBooster\Patcher_Letasoft_SoundBooster\obj\Debug\Patcher_Letasoft_SoundBooster.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 538KB - Virtual size: 537KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ