FIX SENS[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FIX SENS.exe
Size

883KB
MD5

f8e2cfb8027e8cfd596f7cdec4d434f0
SHA1

64d0e27a845d1efd5965ad617d2e937673151b1e
SHA256

deaa6f2ac3854d73ecf52b9a05c0331a0b1650194b18207933352c2e36179071
SHA512

c1afbe75b21f8779b23ed4d228697312df5ca043dd7a9268747ecf2e2c2a65dc3820c77ecef16874146a02697e8ffc0d9a5bf0b688e3ed03edd7d6bb6d0c6079
SSDEEP

12288:n9zwITbhKx7WQeu3D9FPJXOmQ+qO39WoCuwTvk83uRCS26qH3OqtwIulkyF33/8:nqITMvRFhRRbNWoCfkYSEH3OqtwIuXU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FIX SENS.exe

Files

FIX SENS.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

Q3hnVd
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 860KB - Virtual size: 859KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

<IvWFUdu
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ