Sicklewort[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Sicklewort.exe
Size

763KB
MD5

0fab07d708cf95e02431b3353a5042fe
SHA1

59385b88b3a66c11d42d2140c9187fc1cee2f0bf
SHA256

a0e1eb7beb811528f6313529f585385e72a4da56fae12c4e590e5bf33aa3a517
SHA512

650d60b04118b2655915166c12ce60a290d2e25a429309c728626c92e078db548b5ce0cfc629fac81724832f7ff8e905b7382c542927a5fd61f83913f815f91d
SSDEEP

12288:Qthay9HlC5w/mmDbnXuLdADMnrylR+t8dbkoWy0m8IrcgOnOvoFwLcDNC3pB3fME:Qthay9HlC5w/zDbnXkRoAjvLHcQtCz9r

Score

N/A

Malware Config

Signatures

Files

Sicklewort.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 480KB - Virtual size: 479KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 282KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ