file[.]exe | Triage

Sharing

General

Target

file.exe
Size

779KB
MD5

735ae1e69fea0d65c0ce0c98821ac563
SHA1

b8e4eadc749076d8d738c20f084d33682c3def5d
SHA256

effc68899a8894822054617b45d79a9b94f7b756c6ce55d0682c1c7ed7f52e60
SHA512

c1c7f2505f658714f8c90fdd525e14f823226ab911d0c87217f139f266e3a42e2938c656f67934662ce45a5e0031998157785e454cd77535a2418ddb4df10d2f
SSDEEP

12288:zdg0OAKsRfWCU27uleOdho73D7Y0J6QeQ5x4ceqvlfW8vhmAl12tZ9uLUxL7HNHi:m0/RfWCFalejhJXLv4clvlfWWqLB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

Files

file.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 769KB - Virtual size: 769KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ