MultiTool[.]exe | Triage

Sharing

General

Target

MultiTool.exe
Size

9KB
MD5

78798a89756f5261bf44ccec827df615
SHA1

c3588a6aabe88faa5b81a6a28a12de4356517a18
SHA256

0efb8d82618d23e749c48c86a19708aede12b50d28c0e716b1a0ffc04b5f61f7
SHA512

d0a2d4cdad43780950c6c407b66b90a6d4bbf1ff5c3399516652c0e97cdf6673f266103a63cf67f46e0f35c36403019a4fe09d78e3ec05a58cf62caf2408f383
SSDEEP

192:zCFCqWN4aa4rczZb33an2v5UND/rOqd4:zC0bNXw3q2vq5DOqd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MultiTool.exe

Files

MultiTool.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ