download[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

download.exe
Size

395KB
MD5

5001c34f87a97d0d4428272608b0440d
SHA1

8e9dcee9aded97ac7495c3dd153b3ce63d274c3e
SHA256

ffd0bac1b50c92b38b7c441ad623d2d6c3c7492495a4bc6e45c3b1284be193ec
SHA512

3ec492c271d37be944b15f49f4aa76f0c6c78544725af5f4cb7299e591a66a8c6f11af3de8e2fadd0203d385890f79ec925bb0633a5e3e07192b60308ea2ceea
SSDEEP

6144:OP7jCHwTc/JOuDfUM7oP9ynmEOVFij+gnY:OP7/yrBm9Lij

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
download.exe

Files

download.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 333KB - Virtual size: 333KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ