Windows_Repair_Toolbox[.]exe | Triage

Sharing

General

Target

Windows_Repair_Toolbox.exe
Size

8.5MB
MD5

fd0528b0f98029916f772981edc3a633
SHA1

75c96139a59f9d398c572f3f7fb0ee925fd6c841
SHA256

2edaaffc7e7dc1729d3ff5fdbcd2e342a96fba39784d21d3d5671d869b7efd25
SHA512

de2a9b9fcf76cfb600dd7ed456e0a0a0c92f0187711a4f1093a573a0642326df5f88c144d4ca6b6f26c6fe8d4e56b423d784aa9f4c75d9bc1a14a499ac27d455
SSDEEP

196608:tHaNyrJ7M77RSJFHkHeFjq3kag/LrB0F8HU1kA7YDRw:cN4Q/RotrFu3kawDHXAN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Windows_Repair_Toolbox.exe

Files

Windows_Repair_Toolbox.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8.5MB - Virtual size: 8.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ