MSI_util_v3[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MSI_util_v3.exe
Size

777KB
MD5

cd0e78945c58d4814cb9112bbe5755cf
SHA1

ec8fc68af83fd90fd7352209c7ada882f1f7d59d
SHA256

ef4662628eadc14c2d5070f36d3975e6266e5d094d0e6e59dcb51cda975de554
SHA512

106768e64bf2fb9a8edddb5623b6da6042f7a97029ba240280bb7dad103970cfb611ee22e6c8f07a580c900dfc36e379dba5168c722fea48840449c94ba34ab4
SSDEEP

12288:8SoadXxaeL9y+014S6q3/V4txDzCGQrMOs6I4bh8Y36SUTrko7XdigPC/xvXcgFc:8SooaiY+01T64ij

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MSI_util_v3.exe

Files

MSI_util_v3.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

+t"YvW4
Size: 309KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 464KB - Virtual size: 464KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ