autofmt | Triage

Sharing

General

Target

autofmt
Size

285KB
MD5

190cd9216c8153015b6e12d739565a07
SHA1

9f9122390b7388d80635a61d117e1dc1a1552ef0
SHA256

65e3d3dea64c62f7e83f859822d757a43fde1f25415d6683ef61fbaca90be0a1
SHA512

e97865dace4983d1c29db57800e2838d1da0bf8e60f6187b8e1b1255d81d3555301858792150656cef156b31c56c57db9f5fdde3dae05efcd4ee9dbd81bc7c47
SSDEEP

6144:aAsj8543jI2VBuASOT0Fwae9mamJnJUftNBIUv0VdGqRidJ+:xp5p2VBuA6LTNJUNzkdFidJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
autofmt

Files

autofmt
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\b9xpq\obj\Release\QQf.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 282KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ