vantom[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

vantom.exe
Size

183KB
MD5

1c8caf6e709b9f8b9999ef424c5ea4f8
SHA1

3c819d7f8e91cc209e80bea50f89f76e0767547b
SHA256

30406a1600db19bf27a32d34ffea4d90c47d4d36d1e7865f106a67843f86977d
SHA512

a64ac0156b18f02b6607acf3e61ca74d540c66018ecbe375e8230c7298213dbffc9bb855fe843f929201c3e05b717c953fdf7c29ea426dedbad537c0cd83055d
SSDEEP

3072:0durlxKcsZde2vBVQF4EWjFRA229YvepcCBKX4pg:0IrladeAVQF4EWx92iepcCBKI

Score

1^/10

Malware Config

Signatures

Files

vantom.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ