starter[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

starter.exe
Size

18.9MB
MD5

d5416a1089dbadc6054227bb58ebd291
SHA1

dae118b43d0256f33e5d35c1d06b6d33f88f6010
SHA256

841572da329176a7f23da214406a8c5d19c4107206df3d83bfcd8dd6dc906ecf
SHA512

b7d846b0c01e4ac070b5357e3c78abe4f68d78ec2f6d08f0cf672c32259b113fd480914a104de0e050d1ed462dbfe09bbac24635f05f978a0b975e4a9bc1e7c6
SSDEEP

393216:RJU5oNri0Bjaj1cCDu4LAG6vtlCM7NF0JQ+ZEZlB93:5Ou4Zu4LT6rBB6JQ4EJ9

Score

N/A

Malware Config

Signatures

Files

starter.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 18.6MB - Virtual size: 18.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ