Detection[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Detection.exe
Size

1.0MB
MD5

70a5504fa57044a898172efa36316a0a
SHA1

a4e3b1e34bf2d3b1ad9b9f83ad2b8a714b8fe9f1
SHA256

206f62545ade0ef11c5b1fd62fceb2234dc9fb414d298366b673867ad8fb6a17
SHA512

8f292216783becce074e2d31c5bdb841244a05f21b69aee2d4c02ca4beb27435188feb42a90bcad475c9e7dc8338e833c2fa566a219144b11778990777a4d5a4
SSDEEP

24576:V4JICEkXNjquHAH8qgf839FwFF+g5dRPnbsM/m22XiYv+IDmeuLtnjduK9Q+2c:VjCEWNgc1HF+g5dtVYv+IDmeuxjduCQy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Detection.exe

Files

Detection.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 853KB - Virtual size: 853KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ