Encrypted[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Encrypted.exe
Size

121KB
MD5

0f91154b5516e659784f40b5a5cda90f
SHA1

8dda8b6cfb0edefbd7a15e7fc725c1b9d6dc410b
SHA256

aa23973caa6466b6a452663c1b93ec7b147c32d8b9a04a4e7b72ddf14922061c
SHA512

4a27eff46d6e367625a061838118b594dcffc054ebbf403f715e89c60973d11ebe7a7a912b3d5df98e14276f1c7efbafb5a8e183f28133161bffab33b3adc2a7
SSDEEP

3072:XAEfkRuoQG2vZERiOBFX9g0TGv57PsbPx+PsrtLx:QEMRuoQJCiOBt9ktsbp+Pst

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Encrypted.exe

Files

Encrypted.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ