externo[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

externo.exe
Size

12.4MB
MD5

e3c436c2ea7ccca6fb001979fa9fa613
SHA1

40ce10b5fffa0796c6b2d1766e5d4890a555aa66
SHA256

30eb6777dcb0118f5b14c9a1bb05baa6a6e2b1b594535bc313ac06bbff1d64f5
SHA512

777793a9349b8e9752dab2acb5efed4c66afcbaebe7f798c5c331627bcc4485d1d1037c916ddaeb6aa2bca9415d598b93e0952dba9e2b27d8276a2a813857099
SSDEEP

196608:81K9ay30JvVHk2rIJE4ZiDOXB6akbZGyL9/MwabgRRwYz+/eO:J4VZIJBYD5dGkbabgLwV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
externo.exe

Files

externo.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12.4MB - Virtual size: 12.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ