reverse[.]exe | Triage

Sharing

General

Target

reverse.exe
Size

7KB
MD5

f916b145257a16f2c0ef2278ee43180a
SHA1

a8948dfd7ba21a80b5ee00982143947692696523
SHA256

bcc38cf0a1c9bd97dbde47048225531b9a25c5ae44705c651b1c71f9cf46d987
SHA512

c15bbfd681d5141cc14ab116715f8eb02558f1b8ab4b6abc227ddadc8b06393706c9ce5b097787beac13255c766842208119cec18c9d243fd2cbf2ce36029cda
SSDEEP

24:eFGStrJ9u0/6FNnZdkBQAVKGcLwKLqbeNDMSCvOhpmB:is0ANkBQvFLw7SD9C2GB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
reverse.exe

Files

reverse.exe
.exe windows:4 windows x64 arch:x64

b4c6fff030479aa3b12625be67bf4914

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rhme
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE