VESSEL Q88[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VESSEL Q88.exe
Size

173KB
MD5

b04f4d24b71dddee852e1ac939ad84c7
SHA1

57ec3ef06f64636004f18fccfb87e527b9a1e28c
SHA256

8cce7e35531b0f8eaa5f67609588d2e0c0b72bdfe75c3e80d8058d74613bd964
SHA512

0c94f00cebcba565a02ab91b5961f6bcb97b6109518b8e97d606e161572c8c78ebe919f656a8000127bf1442ddbb59267d0972e43a17b480eae09cb118bc2bb3
SSDEEP

768:2BI9khOASh/N3i0poT07G0GPV4dEGssFy+jVtYcFmVc6K:2BI9wOASh11pnj9mVcl

Score

N/A

Malware Config

Signatures

Files

VESSEL Q88.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ