Impresa[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Impresa.exe
Size

1.5MB
MD5

383179153b9f79bba43b73fe9cf9dc65
SHA1

cfa7d25379ce6a7b9ecd8115c1a07b7da8fb9962
SHA256

09aa15a1ee682e43b18e9c76f0a0547050e83558c375d4a1e504ebf225e8fca1
SHA512

cfad1032386d5348d3a139ead8fc0a3739b2a3781b032f018194f4a21fdb012ffe056a0b72015491bafe39a62d53cb4715129259583a94fe6cf51a116b33e5e6
SSDEEP

24576:iN6B2/5qEL7UeyethMZromkLsgBwrWmpS8IrzFpaYrSoG3w7m:+ea5qe+romSlg2FIE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Impresa.exe

Files

Impresa.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

��0
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��1
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE