Virus[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Virus.exe
Size

8KB
MD5

a69ea0ce191bfeba32e86cce94d8c6e8
SHA1

3f50eec7998cc9ccb9377395a1921f5fc1b52e69
SHA256

1797b12dd1b567759222d775ec0fb29b392193bc04fa3e92584f3e6232468c44
SHA512

2aac61363b734fe39e28c4a98417e83044ee4a397f1a1433eb7ba8adf71f53afa088c1fe0958dfbd6621ea4b4a855e4a42646970abe3992d21de5040fb1c4b90
SSDEEP

192:mB4Te/DtJW1S51tVeBgI3xtHWWiWtu7ut:mae/reePyZ3xtHWWiP7u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Virus.exe

Files

Virus.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

VAN0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VAN1
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE