PrecisionBuildOne[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PrecisionBuildOne.exe
Size

46KB
MD5

24ec1351440f879a9c117466a03d400b
SHA1

a00b8c0d2d154e7f8d796a92bfc386c27d405f28
SHA256

cdb638b14b2fab78f8164cd3af79472a5093eedb276ace131b34feacfd0e3bc5
SHA512

a68a27efbbb9b3cad4c679664a24aee37d4f3ca1b5046e6905402af6ebe256cf6e341b4f2bc48f933b1e9eb3bef20f54a05ec6da4aea1b063d309b8d58ebebc0
SSDEEP

768:kYDET2kV6Ja7I09g+Q827gfAUbZ6EdIfc9eDWlIMTtYcFwVc6K:knT2S6aib7gflbgEdI5DxMDwVcl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PrecisionBuildOne.exe

Files

PrecisionBuildOne.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

F:\!!! legacy's stuff !!!\sources\temp spoofer srcs\cool key loader\PrecisionSpoofer-CSharp-main\PrecisionBuildOne\obj\Release\PrecisionBuildOne.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ