Certificate_of_registration[.]exe | Triage

Sharing

General

Target

Certificate_of_registration.exe
Size

538KB
MD5

74306ff01db05a602a39c5da423b8d00
SHA1

f9326efd199cc26ebbc48109c3903e9be25f0b0c
SHA256

9fa768cb5a871346c0831394150d09b4697c564536ae523b539aa12a17d015b6
SHA512

c4b8ed885d1d37b381da6b603dfe17407f83e9ec7d5ad2e6bedc614f4ba4a7c449aad4f0d60ba4ebe42cae12c786f66c2c2bfae30ed28440f5065090aa0762d6
SSDEEP

12288:W+5mRuKb4KDXUd1rGFlAHloLkMAiNqAJ7aJJJJeV3bJ1JiJp:W+SjDXUrvHUAmqW7aJJJJ43bXJiJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Certificate_of_registration.exe

Files

Certificate_of_registration.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 530KB - Virtual size: 529KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ