Targo[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Targo.exe
Size

1.6MB
MD5

ee6aef040f8475b45bbbaa2165cb85ba
SHA1

9f9c476bbc3c8cb10a82b76d4261f58704c825d8
SHA256

51318671b66049a19755b8cf117bda5f72d0e02b77e636f949ed1e368b591739
SHA512

4d542ebb5cb4c265899bc4174efbfdbae9eb1dd2f16e9c3764830c762fcda1f390bfe516d699490c68ed048afca8d7d412bff30bd88ed128c181265544556916
SSDEEP

49152:xK6EgpquMX5Vcim9+0fugfL8JHIgtDp8PveUc4:xKMASD3fugfAR78XeUc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Targo.exe

Files

Targo.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

B:\brino\Documents\Visual Studio 2017\Projects\tacoFormsBot\tacoFormsBot\obj\Release\Targo.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ