prog[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

prog.exe
Size

25KB
MD5

117ba2b1707124a8c0e77cb6a5bfd32f
SHA1

21310c8892f2bb56d95cec55f65bb73e64310535
SHA256

49617ac29f632ab9665f2710fb8d74aa9b783cbcf600f3d514c98af46134e2ba
SHA512

aea58262809e50cbbaaebd24fc9ace184a5b450911624ca4532787d5f6af16ffe1998bd3007683dcb3bd219e390de81ca006c11c02d7831cd2dde70c4b0ffa94
SSDEEP

384:sv3ZIV+OB/ZGfOTic0EwP3hEMSVJV4eqg1EhEbHmfPqb8Act6/GW6RqHn7NnbtD:svpxLW6uy+Eh8wJAcif3nh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
prog.exe

Files

prog.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ