apple20[.]exe | Triage

Sharing

General

Target

apple20.exe
Size

72KB
MD5

586eb7d30f84d95e6e3d3df6d604f3b9
SHA1

6d974013dfc55c15ac8a6fff65dd310e5f4d582d
SHA256

c3ccd73bcede41e35f7d530712b013681cd82248b680751a094a50c7447e203d
SHA512

7e01af981b9f00ff3d8ce1850049fba08bdb6e3b963210b9c53d91989e0fec2e41e9e1265ee457a3664d330682396b65714691e62dd355005367c2d19fad95b4
SSDEEP

1536:aIfb1ec2bcU/GFQ90+YeX2xPQ1oZrGbnuDlg4dHK4WrwytZfvWA6YSt0r7XjweSo:Nfhec2beFQ90+YeXuM/ohxkg4Zlbfb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
apple20.exe

Files

apple20.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ