file[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.exe
Size

756KB
MD5

9d63af72c2df9470c45dc067551c9d67
SHA1

5922dfca45e6695de0094158fd5f90deeed68fd3
SHA256

050e6ec6548815c54e532f8004c7257e9bec51833e7cfcf2a38185eb48d72ffe
SHA512

f63ad142ca73974384eac7f1959a7636873b254525ced1a8350e6eaf0fe6ce7faa95c01247c5529f935dd22e5402eed7b4a07c8916c6a77ff974ff4dceb14d66
SSDEEP

12288:9A13CxBdOj7J1CmEIqUoyL7YDNFtkyjz7LXgFZy1XnZdWlgz59:9GyxBYj7C9hwLStkyHwOTke

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

Files

file.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 746KB - Virtual size: 745KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ