ConfIT![.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ConfIT!.exe
Size

18.6MB
MD5

ac8b8eb29c15a932fb59123a62aafe84
SHA1

be5682f7d6615da7e625bf3a3122e3bb2a8bdbb6
SHA256

c70849072769a026f805ecb46fe2d0a9dd9d0445bcc5bf42c783a2044bf5b197
SHA512

8066407893c3280c364f07980aebed3029bb5ae742b2d32009dd2ef358306055460198713bf1dfd5d2ddeb7b5c14330a656153d52bc8d91e96d822526fe648df
SSDEEP

393216:F1eo77qCCU10poK4M6/664uwS9jO236qtCFU57EF3K:+o7eCv2564uwS9jOS61YEF3K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ConfIT!.exe

Files

ConfIT!.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 18.5MB - Virtual size: 18.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ