emir[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

emir.exe
Size

1005KB
MD5

506c48dbf8d98a4916b3924f6f32c427
SHA1

1f4af9be234973a2e5c577fb8dabd52fa7ecc04a
SHA256

858b9c824d873eda8385031501f199861428e4e6eecf8d6d3a2a26a2f3d3d034
SHA512

fc467ddc7a0b25d60a3e9d3083c6086959ccd1d44d74e9d2dc281545e032819a4c6d42c2a9e003348c8173481b0ffea3c926107dcb69a4395c7a548473201e30
SSDEEP

12288:dXAvnkejwFGfUXoL10Ia2nx6synmjOrCnCa6/Ymge:dQeGsXox0I7n/8yCa6/5

Score

N/A

Malware Config

Signatures

Files

emir.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 714KB - Virtual size: 713KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 290KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ