Crossbearings[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Crossbearings.exe
Size

3.3MB
MD5

36da454aec6540e96b84bff658ca8389
SHA1

74b5f2a221ecb1e6a64f36d0d294daaeae9210ba
SHA256

a1be94ccdc36a3b856ec5bef111f36e21c6bebf48eb1c309f6b514a6472bc715
SHA512

51f0f9bd933038213d47618b34c794e977237a3c9c40c975b29707b0753a9807fd1d34ce04362202b4561a7a676939c7ee063f98933a62a9a047b65a5dee3423
SSDEEP

49152:eG6UiKZvWAI+bTI9s6CYGdJTfmakUOr9Twu16U9//769w2VL6TcVXz:eG6Uh9bTI9yYGd1mnmU9//Ex16TGX

Score

N/A

Malware Config

Signatures

Files

Crossbearings.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

V>Lp\
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ