MetaDataStringEditor_en[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MetaDataStringEditor_en.exe
Size

222KB
MD5

da0a0afe0fa5a4b6def2002b1524ba74
SHA1

7cf1331fdd40c431820012f113be8f96b05a1fe6
SHA256

fdb59a9a6b77fc134b36f53958be96392394d6b9154a2a27b5813d43683cf451
SHA512

18f09dc610064f788a9cdbde00963ab8b992d975a89f56892acce26b227e7650e3da62319efffac86fcac79a86e7c191a6b0823ff34b502de60c28a6f228632c
SSDEEP

3072:VyqBV8RxcwiebIXjpJD/5FXVFbEnop2ElcKkId4g7Rrtvtp:h8RxcwiOG1JD/fXVFxvxkep

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MetaDataStringEditor_en.exe

Files

MetaDataStringEditor_en.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Gene\Desktop\MetaDataStringEditor-master\obj\Release\MetaDataStringEditor.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 219KB - Virtual size: 218KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ