5[.]exe | Triage

Sharing

General

Target

5.exe
Size

635KB
MD5

1fb2088c9d4054cb8881b8065f8c7fcc
SHA1

4adeea429e6ec3fd6c3ce62e184c61b4a1be12b1
SHA256

c39033fb9aa3af73b672cd1784036e84a3bb20d7cb8d2dd612208bdd5b96d622
SHA512

f7935457e959d4ba4684483753e2ca02820fac4fc0c5d3f08a43108d85230dc62be4ad0dd437a276f4f10005ca585896e179a0e3e7ab6ea098b28d7076dc7bd7
SSDEEP

12288:T/qRqjqYB2HqyF1ip9IfxWledlMq6mapp/VhwXyhl43E5aIsKtM:TqpUcrF+IZWljq1mp/Vh2yhl5lM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5.exe

Files

5.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 629KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ