software[.]exe | Triage

Sharing

General

Target

software.exe
Size

510KB
MD5

28d463d212cf47127b65ee3b0fff7bfa
SHA1

d26cc6ee1513ce30124ce1983580fb58f2cff3f4
SHA256

9519d970ccac37e9d1093116ce7192fb470cf1561cd19d5784b8f4fc657462a8
SHA512

cb1e288231c861b08f9a207ab5c21231f576dee0b4076a66ac1c3b498f139bd9654638fbc78638ab7d7ce95b639ecd295d81714f500615ef45782ec8d56af5df
SSDEEP

12288:wbykIOHilpGl8q0QWTAAJHQcSILhL5aAE0js83+WsZ7XdXWLyETas+g6V8YH1+lI:wbLKwh0QW0AlT94

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
software.exe

Files

software.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

Z+gG}
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 253KB - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ