YourProgram[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

YourProgram.exe
Size

52.5MB
MD5

ea0c7c8120f65c9f3d362c7ba24ceb76
SHA1

b5100beec4f7065a0168400cb96e4f478705fb25
SHA256

074a9b2a00c5006340a693fd953494a4c4d62a30bf588be216ad7a2afa25f918
SHA512

765a6be46cbdab962e404555c5706ff721a352e24822018447f34234bac070a9e5c6b2df7b385bfc56ea7db61260bebb39f60b720f5117e9dc0e1f1d4166af6c
SSDEEP

49152:HBLSabOpawrp33DUZx2iQF0TuqpaNcZZsBjM3Kuhps/ULRNpPUkArxPNP56ZuNZm:

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
YourProgram.exe

Files

YourProgram.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 52.5MB - Virtual size: 52.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ