MetadataStringEditor(1)[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MetadataStringEditor(1).exe
Size

17KB
MD5

1de1d8051073a95f4c7eb70993c7efed
SHA1

d19243945bdbbe44895d5b9a06222015993bbb85
SHA256

07634b471f601038267f591885ebb483057637b1ecfc626c257fb70bad2f2ca0
SHA512

0865b8f84dd2e8e75a2f63b66a7d724b62df1f59e4b99deb8699607f756b14265c236b1cf4d6d1032cf65736cb683bdb8e9757773d4bd41598bae06ae4c141c9
SSDEEP

384:Hwi4m+hnbA43wlkrKAAAAA/ePjU15y6O+shp8xnH8bx:HDChbu2eP2+7Kcd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MetadataStringEditor(1).exe

Files

MetadataStringEditor(1).exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\hjwil\source\repos\hydroxybutyrate\hydroxybutyrate\obj\Debug\hydroxybutyrate.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ