vendorf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

vendorf.exe
Size

676KB
MD5

3af5bce31a98b8f311f55b44982e3727
SHA1

dcd95429fa728958531a2f9f43f96ce85d6b9cf7
SHA256

8600699561a3b7a2a44c9adda5023e12edfe847912fd8fd1e1ea5aa415ae51c0
SHA512

61d2b52248b6dabdc1ed66e7a9f18d510f1897781688fe551bbabae7a1fed3b841fede42322672f42ce84aadc90d09f43159bcaf8104126fe6aeb2c6ec9f7581
SSDEEP

12288:eKdZPlLOHLBplM3p4natSiXh+o146z9RMSojga5PVpYObtW2kLvF4BZaX3/HkWj4:eKdZtSHLB15e+oe6QsF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
vendorf.exe

Files

vendorf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 673KB - Virtual size: 673KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ