PORTCLEARANCE[.]exe | Triage

Sharing

General

Target

PORTCLEARANCE.exe
Size

483KB
MD5

796dd3c159b5fb5ccf4ae2d577ebc488
SHA1

246305c1cc97fdd095b51d685f0fd97f1696686c
SHA256

8163c8e218f5715e35eddb8dc41327dd5e8ce77bb9652474692b5e72637129cf
SHA512

a9deda5a1d0272db5ae50818f5299721783c2cd616163cd64869759c11e1d6d5c1b58b67e6d1b461fe5ca80aa07f08a37e6030436690d8de55b2923adaa67cd8
SSDEEP

12288:y8G1KBsTF2SKM/GICWzXQvFrYV10bOnJf5SEXZovH5UP5:2YB2F2SRBzXKKr0b65SiZs5Ux

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PORTCLEARANCE.exe

Files

PORTCLEARANCE.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 481KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ