Dox Tool V2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Dox Tool V2.exe
Size

191KB
MD5

578320b3a257d683631543d86230470d
SHA1

10a64c18573bc14e7fcb7dd9d4a584a9692e6744
SHA256

79cf470eb6bc450e26af11fe3decab3039765bd72612eb792922172cd1481592
SHA512

5a5fafddab61d11764f46fedc3ed74b40179e16063b090cd7348ba31c0e387f76a6f9f6116622cc6f998e3dc598673e2ea1b749daf76bf84453c178454a3bd92
SSDEEP

3072:jOBcgIbP9ix7o2eHTs/yT9TVfSMYoH4otOc:7nbPZ2eHTs/s9JfDYohO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Dox Tool V2.exe

Files

Dox Tool V2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Brendan\Documents\Visual Studio 2015\Projects\Dox Tool V2\Dox Tool V2\obj\Debug\Dox Tool V2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ