ParameterAdjuster[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ParameterAdjuster.exe
Size

514KB
MD5

70bd3e681ae3711704fa647cf67964ec
SHA1

6b810072f18799e7232d190e50476ee1cd9a97b0
SHA256

d2e6db114f1d3529335d037e66282f431301056f294e0d1b258903cfd5fd21c5
SHA512

8be1dbd22b292e23bf237144d66356bef3e7a497fe9623dc975492814a14769ead2e362ed1a28bb458278f125271c40c744c1700e247fbf80f8749b783abc0aa
SSDEEP

12288:ICQDQ4DHfA9WyFot2wkda7Enp+N3OlrJG4j+/rFaAUL1E1yv01:p4DHfA9WyFoBkkAne3kGFaAkE1yv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ParameterAdjuster.exe

Files

ParameterAdjuster.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\David\source\repos\ParameterAdjuster\obj\Release\ParameterAdjuster.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 512KB - Virtual size: 511KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ