TESTobf[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TESTobf.exe
Size

291KB
MD5

ba11e66715349245d9e4ae9c76ef21a7
SHA1

76c3d1b9758b07358b812419743dbee5b5250684
SHA256

eac49d5b02587a17dcb42b92b749110d11549f8b11d260030d6e8287d02b3c60
SHA512

5c5e7e0bfc8a61440463521f2d22a8866cd5a212b83ace5fb7919580e5333a8e258c7fb1ffb8d40da106d44ae9becd6b2ae1379b6b6587c54bdbbdeacf5b6fa5
SSDEEP

6144:ej0U+BewuIDeR3/0vbrgmJdGBOrL6uF+DhExavTWtVeYsI2FLLIuWBBe:ej0U+L/DeV/Armi6uF+6iToVe9I2NP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TESTobf.exe

Files

TESTobf.exe
.exe windows:4 windows x86 arch:x86

a9c887a4f18a3fede2cc29ceea138ed3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

malloc
memset
strcmp
strcpy
getenv
sprintf
fopen
fwrite
fclose
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit

shell32

ShellExecuteA

kernel32

SetUnhandledExceptionFilter

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 287KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ