decoder[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

decoder.exe
Size

41KB
MD5

a3eb30dc4e2dc4b0b307b72a7b788569
SHA1

786f211ef23869705804d3fc8055cf25dbb35c17
SHA256

e5dc6e965871c28ead4561db38f54c868ecd89588ff3e02e96805dbfeef70c40
SHA512

fc51b7a88cf057f6155c8ac47388e8b10b5d1d9c00afa62e7020f3d8ef1fc0bb61f5df9f8877666217f1451e4990ae720a08c291287d2417f0eb72b921f48a68
SSDEEP

768:DUNGYb2MlvpywDr2o/K+z9+hDi5SHy+bC9WiPVrwjQVo06xIW:DUNGqy2r2oi+kc5S3kfi0oPxIW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
decoder.exe

Files

decoder.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE