Built[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Built.exe
Size

30KB
MD5

c37b9c0b280c63b562f92294f881f7fd
SHA1

90088dd304a6f49daf39b48ccb4baca31e074829
SHA256

511a4496bf971f3ee7045687434ddffe2ee784fe16c9338318a7161dfe7f2427
SHA512

94b97fc2e86d7caed04f6d3ea91892f1915587779f7d853f508916f506b1296a697f921222a770549ec9f2cfe4a4d6361a2cb9691f775bf4741d8a288136e419
SSDEEP

384:z4mP+E4GR5f/wtRlPVzbv9GKyy9D+pPiZKFvSC1vlOCIxO1q0wRb/LsU3M122pUN:NN4GRCtRl1bMgDqPiERSjO15wF/qFI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Built.exe

Files

Built.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ