winiti(1)[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

winiti(1).exe
Size

646KB
MD5

2d0799f49041670aafa005363a5577ab
SHA1

84849d06ca39df13f5a607b1c8a8b9baf29499ba
SHA256

11265a19b4c7d55db31b96517d864e52780a9475de3346e15eb39e0b1199f14e
SHA512

b76f8993a2e24635795e0f0a25e679da5410af34cfba55819d1e8cfb53c50b665eb3d5d6546bc47d89b9b38fc0c184a4180b71bc94b6d8fbfd29f35479e2e45a
SSDEEP

12288:aMmwoIc0MIAKMwaW0oWKhe5iJI77/ergmOxodIuk2TFsgCjN2AB:aPwoIc0MIUOywycoLCgx+RPb6N2i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
winiti(1).exe

Files

winiti(1).exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

eTKF.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 577KB - Virtual size: 577KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ