extracted_payload-cleaned - Copy[.]exe | Triage

Sharing

General

Target

extracted_payload-cleaned - Copy.exe
Size

5.8MB
MD5

b8a8c3137385fa40be47215961ba6630
SHA1

688122f458e95518e2fae6b938cdb079f0991388
SHA256

708f5f0d732a5cc463a7946cf86c7a79a7c673000779aa8fe5b1aadf24040a99
SHA512

056de10cd6b798d18aa18e97cad645477149c562efc95d25bf724ab5f92454216c92f0c7717d7375181244d474513266146655ea6aad12bcab1f08e6835f1e4d
SSDEEP

98304:EVzA+NolR3oceUQ1spbvuKSUJ17LrbH4q8y1iYVk1OUkh54oZdxkOHYSM:8PNO3K1spbmxcrbH4a1iYVk1O15DUC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
extracted_payload-cleaned - Copy.exe

Files

extracted_payload-cleaned - Copy.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ