12022025_PI[.]exe | Triage

Sharing

General

Target

12022025_PI.exe
Size

1.0MB
MD5

a6b913a8d698ed57a6280e0639c22566
SHA1

485aa43b8350c0636d2e5524d29da8608c8fa2d5
SHA256

b1bd96341b2c06cf1ea7a1a9026222f1a85d8605798be6f7809100b3e0bd11dc
SHA512

1858ebb11af722eccb5548ef08c804bf384a0bbfcc514614a6305c5090af3f20f6db6c29e29b8f8d2fb354e47c74c0fb0887c4be27364e92f991e81888a08146
SSDEEP

12288:yJ7RokodDPTwa5WlVkplFQlNgGYvuQu8E2w2vS644QI3PKyUU2ORkq:1PTs3kp+aGp27JQIEf0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12022025_PI.exe

Files

12022025_PI.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

hvVq.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1007KB - Virtual size: 1006KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ