Umbral Builder[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Umbral Builder.exe
Size

58KB
MD5

656f7ecd3ef294aa685a7fdc3813399b
SHA1

32b59c0ca7da4ddfd62ab60731460cad01166925
SHA256

197e8f448026ae672b6b340557dae9217d68eb4287381193ba2c143a668af290
SHA512

bceff3154a89ab88400e8759a6ec2737fdb5e6355a5829220f83bf2f1a011841e24a2b1755bb8713bcb44f70a62071b0a47ebb608ac328940fd204e25bd26d61
SSDEEP

1536:EZE6+yFeRc/PdaY6B2I2HUxWuF5umcuu1WPl:+EIFuiPdaY6B2I2HUxWuF5uxu2ol

Score

1^/10

Malware Config

Signatures

Files

Umbral Builder.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ