uTinyRipper[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

uTinyRipper.exe
Size

594KB
MD5

be0a5d94edfb37f6fff7a0cb0b41886d
SHA1

dbcdccddb4d1996c1a1777e2d5eba4205c0bd86a
SHA256

7808589d98c0219fa015b19c06a48aa5ea01e54c8eac435868a4c5c6ce69f0e7
SHA512

a0cf53d5cc5c71ac9577586d3bd523086f0f4bd1f0de2b135da610d537f50f57b11e8537a636822d946244773dd2f4f26ec8a9d33011f29c923fb2d40ec7b94b
SSDEEP

6144:PNUJMnUJte/5ZAqbWcSN9K0dO1hAMs9v9tH93+sDtx3+wh2:K2n6kxnSNJ1Z373

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
uTinyRipper.exe

Files

uTinyRipper.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\projects\utinyripper\Bins\obj\x64\Release\uTinyRipper.pdb

Sections

.text
Size: 491KB - Virtual size: 491KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ