Script Test Advanced Executor[.]exe | Triage

Sharing

General

Target

Script Test Advanced Executor.exe
Size

13KB
MD5

c6e2244cd36f3cd6fa27f4675b33cb1a
SHA1

8450174f3519547a05cc98b4ce930e3da6266c86
SHA256

112be70940e8fe56b0d9b58f8df0175429f591f6061a3abd0f0cbdf22c450002
SHA512

2c8bde443075a7b102f64be9bb31bf15f5d56425a96f3e29bae07c5898568fadc5c56e8481ef2008d09560370ba9e910821b72d6127e6081bc5e22e2d14096c4
SSDEEP

192:9j9/yfOu+0qu4K25l4HnA9jfZ/8+r92zueWaK+lA3/Vg7VfPMa0Ma3kMagMazj:Cc0jFWfZ/8+6dT6/VgJfpK3a+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Script Test Advanced Executor.exe

Files

Script Test Advanced Executor.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\White Cat\source\repos\Script Test Advanced Executor\Script Test Advanced Executor\obj\Release\Script Test Advanced Executor.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ