malw[.]exe | Triage

Sharing

General

Target

malw.exe
Size

799KB
MD5

93c25551aced91a643d24278fa103d17
SHA1

1eba6cee3daa1e5820e7d9148662ca2bd41f71d5
SHA256

b7b22e06abaaf27a5fb791990312a3a5cee1546433ea055d3341a826b003da09
SHA512

fb7be5912639366a36bc5f45f045015889e5a1f0696f7c32a305827d280991dd896e7e6098cfb7065feeb8876eb7eda01fa33c0c6ad395e675a2b28ddffdce9f
SSDEEP

24576:KTd82SXRRIyaQ6aw7lUESJVufn/VgvVY:CXSBgOQzSr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
malw.exe

Files

malw.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 797KB - Virtual size: 796KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ