GRACED SON[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

GRACED SON.exe
Size

2.3MB
MD5

06f3ca2bb5c97ddac2a572270f7838f3
SHA1

353889c7803cab87fae6f0e181d051739446ae58
SHA256

902353696ce40764798071e8712401c94823d9e312720cc2a5afb0c0f22cc4f6
SHA512

5ce9899987b1b99f55282e90c5b46c0d6e62ddf840f5010710137b12054b34a9c71a0c5a7d828aa8f7907223ebf182c1906e4d7ddf283bf462d83a5c09b599e7
SSDEEP

49152:ofC8XZi0Lg3E0wB+Xg9ZQ3BLe1x4zACrfsag+D:ofb00GnBLe1x4zACrfsag+

Score

N/A

Malware Config

Signatures

Files

GRACED SON.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ