stand[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

stand.exe
Size

429KB
MD5

bf641f47ee226195a9506223ede7ee71
SHA1

e9a85078067a0eba79651c2c87adc3e3c18d64fd
SHA256

718861876edef34d68008d700264ce49ffa61057521c517daf23353deb67b845
SHA512

4fc840f4d3c2a0d29f27dc6ff06386e21ef1e694863dc6eb1b37c9d5ce5ac96ae2379cc8390eba960d177bd2a20ee7fa8a7b8cad2a090d503a815c1bdc4c2a73
SSDEEP

12288:g+pQQliCr/k63YjLsC43fyM0AO6fHnTCWB4J41ydNioUrED9eTyCGNWxcmBB+nTN:xxP/kAu8PyjA5HnT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
stand.exe

Files

stand.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

�Ywc
Size: 281KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ