CPSCounter[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CPSCounter.exe
Size

237KB
MD5

22f213d2a7aa1ef4c122cc662df20c2e
SHA1

6aa865661defdc1abe26c723833726fb9896d0ee
SHA256

54479adb4c95efff0e28eb36fcbef0f89971b8dbd65d4a057c7bc90c01139c25
SHA512

a9089b35720b347235fad089733059a75239ca9ed665617a4ecc259d7dd78a530975d01989b994df14dd3b7c503fd6aad1f302318fd1a1489e897b437279598e
SSDEEP

1536:wnEXNEEmiwV0hWJaJyvX2scCvEjx73x1vQIm8lu8LB8J29suranxH2ufS/cqw2d5:20u80Ajx73x1vvFG22gaxH2zf+ZiAJs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CPSCounter.exe

Files

CPSCounter.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\pje\source\repos\CPSCounter\CPSCounter\obj\Release\CPSCounter.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ