MetaDataEdit[.]exe | Triage

Sharing

General

Target

MetaDataEdit.exe
Size

422KB
MD5

7ba4c63cd06b05090018696165310697
SHA1

b869baf286412c105e0967d638f2045bffbb8195
SHA256

90de1d4c8b4e44e22f87cc193d3eb68a85551d48f6f63f9cb4ed46684454fd5e
SHA512

ce84e21ed9e86a7115b836f6090309133baea358d5080dc620a04ab43323851c91272e8829e41bf6e2fa76780c603e26167278f01bdd2b5306b4a8717b7f7446
SSDEEP

6144:18RxcwiOG1JD/fXVFxvxkepq8RxcwiOG1JD/fXVFxvxkep:1sPiOs/dfvmecsPiOs/dfvme

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MetaDataEdit.exe

Files

MetaDataEdit.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ