a[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a.exe
Size

404KB
MD5

52fdffefa71d7907349ae0103fbd9e36
SHA1

3ddeb3b5e0be89c3ccb8d75b2caf13577bab8c3d
SHA256

b9d16a22a2fc9c0d11f6a62bde4b1d0056467b200046a4ac143744b2b64365bc
SHA512

94b6c35d24a11342fd5637d7b2b0bf08ba97eea50d67330246581b140138e2248500904cd7d4c516bc579e4e08ec3945a6ff9debb2d6522564267de5ba0b0d1e
SSDEEP

6144:hri4I8jzByPNDh1mL82qpFv8AqKvkzRQOwR+bKxljrVSh:tIML82qpFbY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a.exe

Files

a.exe
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 184KB - Virtual size: 1024.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 168KB - Virtual size: 1024.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 1024.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 1024.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 1024.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 1024.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ