image003[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

image003.exe
Size

670KB
MD5

e6e4cd20a1495fc3fc755f09ad0c6679
SHA1

6184b604894e73b692e93c912bb668d9d2bf469f
SHA256

6437123648ec5c9816dfa35e9f50f4ba4e21d759775c32a45fd2404feabd0894
SHA512

31084373806e5268285dce84d28681cea771c2fb14907b1a24bf44a34f8f2d903d9fc2b906174429de89deb97e06e786e785cd898e0753080f386c98e476ba1f
SSDEEP

12288:t87kvzMQamU6XMjoY+wkO7g6AU+9PiHN52T3V/v0gRTI5vlNBF4yZVNr8c24zfi:t8ozMXmDXBY+/Whz52T51YlTF1Bg4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
image003.exe

Files

image003.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

trjx.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 667KB - Virtual size: 667KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ