IdleMasterExtended[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

IdleMasterExtended.exe
Size

1.6MB
MD5

47ad61ae6a4a659bbfdd90c7980cb6f2
SHA1

6289fa5dd42d2170cb58f714e92bcedf62bf6cf8
SHA256

325b71ecff6fb6d144e22f2c95b9261e0f241e132200ab51080ce60a4f69ad0f
SHA512

60426bf09df0d04fd343f85544975d6f25040dde0e50543c6709adf31b462653e4f96d3c24500079ee3dac6aa54ed684bf3ac0787c693bad8e537e5836e631f8
SSDEEP

12288:mRFLvY0AMI7jU17mOx2H+xRupUliqYKs84+wPNSljyCCEe:GU0OjCne+7upUl5Rs85yCCEe

Score

N/A

Malware Config

Signatures

Files

IdleMasterExtended.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ