Mailer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Mailer.exe
Size

799KB
MD5

6fb129d9b52f435361d67a09739874a3
SHA1

59e0e92559231a989aeec6e4a58e252ae29106e1
SHA256

6407bfd4274dbb7f9e39c2546b589d2a1f423c56d943d852318e11f4592f863e
SHA512

8eb6e11ec0808d529fac4ba18a797a9a55803d97163520cd246ad591122e0fdc54d673e42e7bfaa7b248aa78e9901d4f2af9bcdb03e126ec7cceef202610211a
SSDEEP

3072:7bbKbAUZtP6CMwCzh0f8l6Sg3yk9/MyeMauqwCzh0f8l6:7zuEN9k9kuE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Mailer.exe

Files

Mailer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Coding\VB.NET\Projects\Neos Mailer Custom SMTP\Neos Mailer\obj\Release\Neos Mailer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 434KB - Virtual size: 433KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ