Url To Dork Converter[.]exe | Triage

Sharing

General

Target

Url To Dork Converter.exe
Size

754KB
MD5

b2ff28b8489e73db64796ea27717faf1
SHA1

26afa624fb3b99049754f726a91df7c270e1d5fb
SHA256

d177c6de17fe9ee456edddaf814aac4107a239fced43994364b57678c751cfc5
SHA512

44c8f3d59102772153d277f138904275e5a7c6db9f64dcdc745e0633f178e9f27aec132bb9f5e7a0c128310814819b8bd142e05e60578e0d97b4296b67314d85
SSDEEP

6144:V5G96AUKhSJ/gQv15sfHfSEi633ItXT2eFQrSB0Jk1v5G96AUKhSJ/gQv15sfHfH:V6QOi63wXdv6QOi63wX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Url To Dork Converter.exe

Files

Url To Dork Converter.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Dillon\Documents\Visual Studio 2008\Projects\Ez Dork Gen\Ez Dork Gen\obj\Debug\Url To Dork Converter1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 389KB - Virtual size: 388KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 167B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ