messagelogger[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

messagelogger.exe
Size

58KB
MD5

09285d16c40d4c96e96648dd7d13ef48
SHA1

c0a34bb9eb7dabeb64a47f98b98451f08357f4d2
SHA256

c8e1e5c5cf8dde71353a6dad7453cf81b5ee7b41a1b76c4e14d9b0f9b3ca74c6
SHA512

81bc502e56fd6eb8841b3a3c8a57c0024e9a07fd8504589ab4612bf0aed33bed9ca44ea87aed71f6e88319cde231bdd26ee76393364351651e6b9a866bc479ea
SSDEEP

768:IoNJmXsKrkiX1Mcc8vlnwGoG+HjDT+odN5QEQNYs9J2ZnWcMoW0KaE0DTfAvk/Ie:IoWXsf31/GmnM9J2ZW/oW1t0D6lY

Score

1^/10

Malware Config

Signatures

Files

messagelogger.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ