C[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

C.exe
Size

206KB
MD5

f364b18fa9732bd9bd4ee1fa57f9b86a
SHA1

5466426f1412209bc6c7d581bfb11c0b365c3004
SHA256

dee79fa766d94f33ff21cbff786b8e003f679fd266666ba9542d63ea50bca420
SHA512

6281ce8461169c9cbf60eb35b6d43ed458afa0b2db7d55fc12844c6c8acdb2a516b35ecffb0c41de6b99d284278a9be5c9ab24e24a2c2440af06e51c3d8e5a7b
SSDEEP

3072:OmsJjECvVy2SmaXU2vnZdnz7GXae4QpCwLUXbStOA3hX3kry:ODEVTUoohpCwabkr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
C.exe

Files

C.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 203KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ