PandorahVNC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PandorahVNC.exe
Size

3.3MB
MD5

bdf57bb779169e0e76dd7ef9b962a3a8
SHA1

8635cd15e6ca3929aabe49ccf8202621e8fd624a
SHA256

e612636863efc9d4963a7bd65dcd5e30b612af8a35122a88cc5d500f680860d9
SHA512

40b0f0db351a8247f96b4848562d8f806451495b08179344101141c805b2b07707edebfb1792ba7f567ca2139cdec1de0c45b3c3694ee5f2e4111575cc1ac355
SSDEEP

49152:mCHC2cya/wkW1P41lRncZe65rb5p0ehYHP7HC2cya/cSV:mCC25o0B41DSe6NtOvTC25oc

Score

1^/10

Malware Config

Signatures

Files

PandorahVNC.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ