ENG[.]exe | Triage

Sharing

General

Target

ENG.exe
Size

274KB
MD5

19178c984d2b0cd1892184d49e1fe363
SHA1

aebbd3bc04139710060e7ebc2d1b4dc1fdb3ab0b
SHA256

3b9ec63de654a60c5daf67e8be68c8b99e0df5f7d52948f953a6f73745419879
SHA512

4e9dc1df719f233509d86c9a1174bf0c62c8902cbc370df2ec5f688df7bdaac0d42de669b7980541afe108a8a1f11a512d713ec8b3fc9c39fa815b96ea7930fb
SSDEEP

6144:PFc2dmBAWN/ccQEU9euYg7XCOiQ04eA61CIjjibEjKpm7oS:PFc2A3ecQEU9euYuXCOiQWHkIjjX2m7Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ENG.exe

Files

ENG.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: - Virtual size: 664KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 255KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE