Small Complex[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Small Complex.exe
Size

561KB
MD5

e9e41970d8ace64a9da61cc3107953aa
SHA1

1aadb13dbf570e8422ea85f00f7931d1038f9c1f
SHA256

0e9cd8cba34976c70444d4f99415f5666934ad452cdfa1a79bca97a970dc9352
SHA512

27b95e31aafdbc36b8735c76f181ff7f25e2e8858282b54aa58f35ed255161cc4d448e6476e0dca9ac0502b69bb0afec8b8c6badef0d536c54df42874b392a8d
SSDEEP

6144:rFcxGgLhxvK55CgvZHXch8M8C6Rk8ImreYLO:rEGgLP851HMh8M8C9vWtLO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Small Complex.exe

Files

Small Complex.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\jenkins-runner\workspace\Bakin_Steam_Release_Build\src\Yukar Engine Launcher\obj\Release\bakinplayer_launcher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 545KB - Virtual size: 544KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ