BytesConverter[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BytesConverter.exe
Size

11KB
MD5

c9414411f24be56639063c525f10b39e
SHA1

860e604bbce36a7d29f9856936dcae799fb9f07a
SHA256

73e3e08aaab95d0cdf938ce2cad7a567179058d0cbc797d4739dbd6bdec0eb7b
SHA512

a1fba3ff86351eae6a9382d82763e94a4d341e8b4ec789bd36af021046685b0b4ee05059ca1f0eb1cf285c9caa07c7401784154155591d7548703f5e9bd77874
SSDEEP

192:vBhEN0ecRR9D4dDIy6uuoULuVKa9wD9nIVAB2csWpuuVyYfdZDWi:EN0ecRR14dDN6JLuVH9onIig/WVrf7W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BytesConverter.exe

Files

BytesConverter.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\penta\source\repos\BytesConverter\BytesConverter\obj\Debug\BytesConverter.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ