file[.]exe | Triage

Sharing

General

Target

file.exe
Size

745KB
MD5

1a9fcbfd38322f7ebeb68a1ba8619b26
SHA1

f681eeced7bf6351257e9af38fd1fd858f7fbb12
SHA256

cb3156d5b2ef104580e96cb03430fed58cbfdeed6e70874e825dd7221d26379d
SHA512

fe981c04256bc21243b81f051632b1dbb00ded111cf73f6515adac3aeb59f63ec7e8026da31e832d8ec50167edab0844799911ab1a027592ac8fa44836100606
SSDEEP

12288:ho8gdP8GLDbfgtsJdjlbr4JtPp7nou4/ZUUAfDCDuxNETymj26:zOzb4sJXmtx7oFbU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

Files

file.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 743KB - Virtual size: 742KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ