user[.]exe | Triage

Sharing

General

Target

user.exe
Size

3.2MB
MD5

6c6b777d8e1ca16b3f2be293d1b417d4
SHA1

5a2e987253aa8c4606e5e8829c4ab823891226c2
SHA256

48f11a020991c4c5990a1431ef576a7c5e3f502da65fd12a834ad0108310fa79
SHA512

fc3698b5eeeb530a45cd58ecec8240a7411070dcb92dff0657e3e67e74b8a42069bd6c96532f2b1a3a33ac0118e17cdf40233abccea303da8ff1747e20b87913
SSDEEP

98304:zWfPAgtmK4/pkEIcqDGrTQBEju6shMcfjWxZkuT8A:KnDmTIBDKTq6s6cfjWX8A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
user.exe

Files

user.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bsS
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE