Simulator[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Simulator.exe
Size

1.1MB
MD5

145538b8531a97a77779cb4b2c07d8e5
SHA1

8fbcba08d8ab9d6bd8376997d885582bfb898f17
SHA256

bb450a8a98e922e4f49dcea961a08dbaa3658a8cba28e92cfd88263ad3222555
SHA512

e67238d469afb9c9a14ac090c52adc43c02da5c2c03e9b69a57e83db0f550c4b498c57316d83e1225e95a4fa427c900cb697458778cee4258308c7fbf866c6f1
SSDEEP

12288:ma4HuWCqBSFxiVenb4G8BiVecC8WBT9HR9m21iVe:m7HuWRBSFx2enD8B2ecCxTf9m212e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Simulator.exe

Files

Simulator.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ