Creality Executor [FULL][.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Creality Executor [FULL].exe
Size

31KB
MD5

06754e23b4fffd4c459a4fb22399508c
SHA1

63fb0b01c774f6421b7c593b52ed6e3a8154aaa8
SHA256

e01861c42bbb02cf38b5bdeb8d61a84c13fa53ac7e6636f521ed2e039bf9f3de
SHA512

c782df2089d4bb84ccdd07027bd003b4e4e25211f9bd7307c4cc7343ebed2eca9fef695eba00992884fd53d45d82eccfe9da65053f50812d696bc65acbbb3234
SSDEEP

384:7GPBdbuDVtF/xiHauYDMZh41VYtzxmzNGuokwVwARB3HabmKssdfVUOo89fqK7ZP:7G7UEHau5AMGYB36bmRsd9kCZmHk9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Creality Executor [FULL].exe

Files

Creality Executor [FULL].exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\herli\Downloads\Creality Executor [FULL]\Creality Executor [FULL]\obj\Debug\Creality Executor [FULL].pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ