[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

.exe
Size

51.6MB
MD5

b79738e52bdc5f41155601fce7cf1270
SHA1

139a7489fb45b383c2a4e068b987ef19e3be6c7a
SHA256

e828ddec2a9d083c90196ba7dae38388b0a00c4b64f496496f3f7e12bf791db1
SHA512

19e7d6be37b5d013d4dbb60d98c20693a4de799ba3a6496018cbf2339d32ab00aac710c0e1b0b4e78de72cbc580c0c236351ffc1d73bf0772a5b64e35519eca3
SSDEEP

786432:86TH43KBIyzHUxGmtXs27JlfQJP2CR1r3ReW4pM5zzo1PrfHsiMP3jfrxVXS4OcR:B3iY2Rtflv5r/jCfy4FJE5PVeB5oK7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
.exe

Files

.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\1_BIG\Visual Studio Projects\Majed Installers\Majed_Installer_v2\Majed_Installer_v2\bin\Debug\Dotfuscated\Majed_Installer_v2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 51.4MB - Virtual size: 51.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ