Hosts File Editor 1[.]5[.]14[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Hosts File Editor 1.5.14.exe
Size

7.2MB
MD5

3c2f4f2a439044626538e81df1d597d9
SHA1

469d3effd7f4ce5a34882ca69a2f0fe634cf05c7
SHA256

da114a7ada1ee1cc5eee1eefa0daa1911eb30566c253c1bce1be5dbe3d4752da
SHA512

9128a58eb1a6232d4f909ee5655c4c2fcf9463dca44e32bb8c4c67a8093b6f243b1b5b29a6a31073d721ea77c56b4585e5ba847b5772ce81c43d44528a27f79c
SSDEEP

98304:UcnupHu7/Bf8lrPD9HxEKQIXBpaoNWcAKNW9wd:UcnqrPDbEKQqBHN1Aasw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Hosts File Editor 1.5.14.exe

Files

Hosts File Editor 1.5.14.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\FINAL Hosts File Editor v.1.5.14\HostsFileEditor\HostsFileEditor\obj\Debug\Hosts File Editor 1.5.14.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7.1MB - Virtual size: 7.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ