enctest[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

enctest.exe
Size

10KB
MD5

28636d8e9c328029dbaa438380739ac7
SHA1

1fb8fb79b77a4274ca35c4e7e781c4c371e758ba
SHA256

c27a285ee6dea3045624149a36d5eeae9038318c760b7bb383bb294a8e6edf88
SHA512

8754e47c5148de06a1375b20454777545e87252f4a22ea3359621f4963ff077558b4da5cae6eba82fae606929f8be4f440bee7cc143af79936ae63a19e414c41
SSDEEP

192:yjNeicynCseNrBmS0JqldOIOVhv0Wp5nqy1PWZVJDM:sNjcSCT6cdZOVhXqEPUVx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
enctest.exe

Files

enctest.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\ander\source\repos\enctest\enctest\obj\Debug\enctest.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ