FiveDump[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FiveDump.exe
Size

332KB
MD5

d46abb9c761ac78228d9461345f89795
SHA1

67cbf3a84d6d9349f1c04c0011c48b4d2448b95c
SHA256

4929dcd4582e656257fcaefa90cd136fc2378f2bd8951ce1fc2352dce31250a5
SHA512

7187dd3dbbde6fd3b699a55b49d17b8bca4ca84717cff92b89df2fe1fd398495bd5466d23e72388af848c4c8b8dffd140a655a7101a7753996e970012f982aa8
SSDEEP

1536:cGllvRIYCbq7S6b35eVLxt/gFhr8ODonbq7S6b35eVLxt/gFhr8ODs:rLKHbWVkhg/VonbWVkhg/Vs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FiveDump.exe

Files

FiveDump.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\UROS\source\repos\DumperGUI\DumperGUI\obj\Debug\DumperGUI.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ