regasm[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

regasm.exe
Size

694KB
MD5

62b9f8d4c98febbcd68e635c14d8d882
SHA1

9689119fff4101543313c9fc73072cc3f7cb9736
SHA256

e93063292dbb2c3209541ea13e57d0cca3225f35eb18977d2b3400a97255a49d
SHA512

7eb0993733bd683b5b4ad128c1f7d746de4125da05d5e8bdbde1070705175ac12b431ab1924d08652462a3f4e5bf63bfb60717ac6b476186eff30e4aa9e2ee05
SSDEEP

12288:btJJZsVISjztCzxhgAhxAFmu52iOYTH14FErBxLef:btJ3sVIUzkTgSqFF5bH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
regasm.exe

Files

regasm.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

hwdG.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 691KB - Virtual size: 691KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ