Nulled AIO 1[.]0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Nulled AIO 1.0.exe
Size

725KB
MD5

8536702b9ef279a7c1fce7ff6d04bb2a
SHA1

335ac47bafdcc20a976f866f8d7bb858049a82c1
SHA256

20f29e69e1c2102461dd5cf744872c332acb60507f5c4e7d3c8f9e6188353722
SHA512

55cf95c0f69ef2b8f4f22a0878f5f082789f84cc703566baa41a5bd4e562dc993546cb70452fd0af53b04782b9b30c7d60cf571123a8daea3f99a791cae8183d
SSDEEP

12288:4GtIWhWOp2AqbRRWBGVpDNlIkWmARWdqzra5E54gUO+:tphWJzb6BGVpD8kWmARicr554gUO+

Score

N/A

Malware Config

Signatures

Files

Nulled AIO 1.0.exe
.exe windows x86

Password: Bonkers!1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 322KB - Virtual size: 322KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 120KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 280KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE