file[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

538KB
MD5

8b6bc2105eb2aeab658e80ca64f915ab
SHA1

551a021b0ef4c0d17bb540542d543c2b3c49b296
SHA256

8feed074667a2fc139c4e6cf43037bd5d577379cc908fc0905584be2336f1b14
SHA512

c16180e039eea0c952604bc8e746474a0504526300c77a03d159000dd5b90469967f0a4204ed672c7f41139b0b4279645640be34ab32cf136ee6f1c595ed08d0
SSDEEP

6144:AYqdc0NkzDVlnLiTIlA417NcN3p0NIb88WsNMPaKFP3b2V122J0sL:A9J8bL79cN3CNIb88WsNMP5F1k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

Files

file.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 366KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ