Processor[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Processor.exe
Size

6KB
MD5

5cb689373dc36f1613da456d4bea8498
SHA1

962dec957c762e824156b7f08ebf26166e010cff
SHA256

107a48ec2c6f2b6436eb8dde43dab7cfc3e06315eb386989d7a4aebf0114ad5d
SHA512

d75e79e15f9ae70fb1cf8d5fb3837e6a1cd6fa63130e631fb485cb4de675488e220bc5650fbd14b0a8bc56caafebb5cdc7f703b0a12613fa3ae50826ae883e87
SSDEEP

96:WFuOONYtMrKoMtal93gCLFge+Xmx0DV0Kihacp+WnsrzNt:WFMC6G0l9QC3+Xmx0DV0jacgWnst

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Processor.exe

Files

Processor.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Project\GroundStation\PMS\Processor\obj\Debug\Processor.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ