random[.]exe | Triage

Sharing

General

Target

random.exe
Size

345KB
MD5

b4b23395474eed4df3b8113d90fdf3f0
SHA1

25399a100848cdfc995b59bee8fec5d27b451bc6
SHA256

c136cc4b86cb9fcba40a5a0f9d0a33f5dfdb47b79ccd485e8366d90af029af10
SHA512

6e968a1910ce0c8542a3cd0e6715906b4a2f5bced3a90ab7e4e68478e8aec4bfc6435cc1db527bac5f262096476c3b971601b182ada09a7afdd37baf902ce659
SSDEEP

6144:Ee7/cRR+JQ8mjAnN3yf8Hwjq4LQvwKnNGBf5UkNEH9IuyyrYJu:EY6R+JQXjAnN3ykQO4L14Y6wmOnyrYJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
random.exe

Files

random.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bsS
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE