download[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

download.exe
Size

755B
MD5

b7fe8fbe29e97626181bb3574e2b5a3a
SHA1

77913fb0158cc0179d623e47f6ecb3105515d210
SHA256

9d62addbe9021fbf4c5443e9c9a8e1ce51dd2b84376cdfc9891f57ee2f6bc9fc
SHA512

f266315a648896dfa57e78d03eb1d01eebf0f0e6855438a885096f07b1b2bdf7ccb3d9189989b34de7ee25cc81add4e2a4b4b34dac8dfcb28f5aaa0a1713dfb7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
download.exe

Files

download.exe
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ