unpumped[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

unpumped.exe
Size

494KB
MD5

e97e3e11739da0589885679517e643c0
SHA1

1e8d4b1386bb4b93cdc17af69e4d1b3ffd0b8679
SHA256

8f759d16e3d987d4af69a8b805fccc520be05f2e81fe21adf6e5d193e8a519a3
SHA512

21f96ccc2d4b5737528adba32ff253f7ecea579d9e3bf8c82538fd56a77e0fcd0094e76b80bbffbdea5624a6b9bd2287ae8e10207312b27aa2b07921c8d2ffd9
SSDEEP

12288:lwxxdaulVDZ3dj/bvy46NtzrMu1usNEzK7DA:lwvFlzZbvEhrssNEz6U

Score

N/A

Malware Config

Signatures

Files

unpumped.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 484KB - Virtual size: 483KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ