ArchiveFix[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ArchiveFix.exe
Size

666KB
MD5

ab51890f4178c5a32b4f3f4bc28d79dd
SHA1

14c52c649e102e209d75b40f9f90ac2219d9fb2b
SHA256

83468b4f222ae516fa288f4cc3701950ef6b6a6af23f15dc676b915773941575
SHA512

0f54b66a2a5c6f128cad619221c2e6124fb4bf2e69a19c7b6dbb65b679d9a934db54f81d15aefcbe84963fc032b0a001191d75f6f8e3c9a74476cc337d40b5bd
SSDEEP

6144:etH7loGXb/cPQ1GbDbHSZlsvz8u93I20c5K8EtGI9ZLWyserlS:et12+Sb8u93v5KBcI9ZCiS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ArchiveFix.exe

Files

ArchiveFix.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

L:\tools\gta-toolkit\Tools\ArchiveFix\obj\Release\ArchiveFix.pdb

Sections

.text
Size: 302KB - Virtual size: 302KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ