Scan[.]Virus[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Scan.Virus.exe
Size

213KB
MD5

8332c9ad775e39e37fe6bc0ab1a46923
SHA1

64deecb5268287ecaff4d180d2f8b4bc6c9e699a
SHA256

7cf3a992337c754ee2b9ddb9d828cf3b30e45e39d0d801b836804584769fadee
SHA512

5470708c167d337e3ed5c31847fe392db8577c30c5a484f355550074c266e7e9cdf881c9320cfb17392d73641da9c9e06f064a1e2974a7d59d5e6149fbb9c32e
SSDEEP

6144:me/Eh2I7NOLhN33a2XpdXKp98mbkcNwiTZeAG2xCYqP1WkNOLh:OElN33a2XpdXKp98mbkcNwiTZsQl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Scan.Virus.exe

Files

Scan.Virus.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\AW 17\Source Code Visual Studio 19\Scan Virus\obj\Debug\Scan Virus.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 157KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ