porscheinboxer[.]exe | Triage

Sharing

General

Target

porscheinboxer.exe
Size

593KB
MD5

5488e36a41faa4e697a0ea64662f43e3
SHA1

4c2a306ca1b2c503b9e97d11d4ce4ed29d7612e9
SHA256

95b966f3c5f92a7b360d6fb5dd02f68e940fa845db72809d08a053978e778e3f
SHA512

32ee7b65378748852939bf5fd143367cfc59468dc0e3120357b187727d363f8eac3164ee93380f4f7d503436af0ab6949a05a5e0ccc4a0531ba7469bf1e96ed4
SSDEEP

6144:0Tvh82Na0QMZG6vgJd0HioAWu3uLo51pi1j1TCIbt1ZQ1Zrks0rS5YUfsXr7iecN:ohVo0HioBu3yCeOr0rS6KsXr7ieWCU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
porscheinboxer.exe

Files

porscheinboxer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 586KB - Virtual size: 585KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ