Hard[.]Disk[.]Low[.]Level[.]Format[.]Tool[.]4[.]40[.]exe | Triage

Sharing

General

Target

Hard.Disk.Low.Level.Format.Tool.4.40.exe
Size

2.8MB
MD5

22d579652d6f7b792b9fd4b5a2e777a2
SHA1

29638fb0363a0c32b7f37aba8e18fb886b1c4a46
SHA256

7adf97f00c3f1cd31572263dc7b133fc3e1567c5fafdabe989752f3d10426cb3
SHA512

06e1bdd2b55bd766610e4d4d2ae47410bff4cce5474028420bf51e3a2cf88d911456bb771a2da1bee7097cf4871fa4b482f06e4e026e8dfc22b3d4bb44eda3b8
SSDEEP

49152:iEU/nkSyMBE1K1V9Z6Dwc7+fPxr5aBero41xYJive0/yrca63Sz:iEU/nkseK116r7+TaOoJJi7/yU3Sz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Hard.Disk.Low.Level.Format.Tool.4.40.exe

Files

Hard.Disk.Low.Level.Format.Tool.4.40.exe
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 355KB - Virtual size: 354KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ