ET_Optimization_Program[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ET_Optimization_Program.exe
Size

204KB
MD5

5350863f560a89213a29b7f743698527
SHA1

3a624ddc0d6c0167f73cb838d8c68b526f613883
SHA256

33f69f407d8ff31e83719e621aa3fdd5c5d6313dd26b7aab25ce6f631bdcbdef
SHA512

f50f951eb4691073ab4cb348284ae4ac980eaf51d3a1d7923f471e3cec55503d48314020b5faa96292723133852df46a7fe31d3d2e3a6b5ac06087909c15a22e
SSDEEP

3072:fqGOE+x4cbZRHK9o4T4RbRaR9R8RfReRRRQrArBrirjrErFrmrnrorprbrar5/4p:CGOE+x4cbZR8bI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ET_Optimization_Program.exe

Files

ET_Optimization_Program.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\EverythingTech\Desktop\ET Optimzation Program\ET Optimization Program\obj\Debug\ET Optimization Program.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ