windows[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

windows.exe
Size

896KB
MD5

e03b2f6441c352f60856aca421890d7d
SHA1

2082538fb63d5d8113c70688b336a6aea35ec4cd
SHA256

688b0c861f46f9c635e0981b49ff4bf900a62c71e97ab8191436dc0497b8a7ef
SHA512

dcc6223392d9b1d72c2394ba0e4311062e599ffce0cf79cb9d9152211fbfc8ce4c9ebb9dcfd9be27e6fb61538344d72e9fbb887019de23eba671cb2c46f7eb9f
SSDEEP

12288:bAEVkPzf2iXwp4yQTz8NgdZa4uoKtzbCzCIpoi1RGieX14C:g5ZbK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
windows.exe

Files

windows.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 884KB - Virtual size: 880KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ