Vexternal[.]exe | Triage

Sharing

General

Target

Vexternal.exe
Size

6.3MB
MD5

d3ca68f153ef3bf8567cef8c9055d1f0
SHA1

a488647ac3dc1392d91dd4f92a6196380173b312
SHA256

efd42a03d0cbd16ec620b9a7a1f9e7e4039507c4fd5bc8db40d99acef891ed53
SHA512

c7516b56e1ce9845b0cc0a309e777931e618e70a756cfc7d0691b8a1d7669e129d27267b3156fcda6aa52c701304d1e257e89b047f665c02fb9821f326c6b0d4
SSDEEP

49152:lL0jLeYRcYwPmVZOgAbs1XWBuyWYl611LCsokz:

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Vexternal.exe

Files

Vexternal.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.2MB - Virtual size: 6.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ