[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

.exe
Size

4.4MB
MD5

8d994855cf1c0d71281f235932e9cf0f
SHA1

3ea3daed8854dc89a0cdba4bd6a7128b71360c63
SHA256

2118680780d9dabe1a2c5b22269d224535b418b1cc4429e67b919846150c4bef
SHA512

ef0f835c9c823a83e8793a46a3e7f08b1550bd1b2e9f089833985a7c1b0269d0a3cf9dfd7eb8dd49bd8c76f79f0915a5dc5fb015c0acb235c923b2c705819e79
SSDEEP

49152:6OK3th9Yp3O7mXa7bpltN/kwbeHWth9Yp3O7mXa7bpltNd:6TpYp3Gmq7AHGYp3Gmq7N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
.exe

Files

.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\damia_de0etcp\Desktop\Cluttscape_tutorial-2.13.2023\Cluttscape_tutorial-2.13.2023\Cluttscape_tutorial\Cluttscape_tutorial\obj\Debug\おばけ.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ