CouitaRecovery[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CouitaRecovery.exe
Size

14KB
MD5

7ddf5e0e8ea5603b66576ccc60513b69
SHA1

c59db298bdb7b66df3c9815b1d2d42d42e2378ed
SHA256

a83a94fdadb5cafd3e9eec3830d88f0a6e00e71c8f25538cacea8448a8dbf5fe
SHA512

b5e3064b75046ccfbfef4aa56a1415ffd0a125f5b47e8edec9724d22017ef1ef56de672c047164fe4b6677109a3304d70c8650712f7afd94754138eb647de3ec
SSDEEP

384:06WNxDCwrLIo9UrUVTxrZNrK7MpxrZNEkX:NWDH6rwrOYd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CouitaRecovery.exe

Files

CouitaRecovery.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Couia\source\repos\CouitaRecovery\obj\Release\CouitaRecovery.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ