multi tool[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

multi tool.exe
Size

123KB
MD5

ef2bef29ae78302516d7ae83449a77cf
SHA1

6c7e8cc89c4d65bd3682e09de11456bd215f042b
SHA256

3d6e7e00580e1b17849dcd6c80cbe10b09b2e677deda5016c3baba36517dd462
SHA512

f036b16b17e90d8bcc7ea45d443d7d7fdc3b26c095f268f6d97cce31404d0e527a3e014e5650fabf3c30e3ebf0096390e547b16304abb5b4a2c015c9fb5b6694
SSDEEP

3072:LutfyBqcmMDSY3K/hzwKLKJPOaHGmQOR29wxTafk2i:LS+DV3K55LKZOaGq2uxWfk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
multi tool.exe

Files

multi tool.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ