Umbral[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Umbral.exe
Size

175KB
MD5

9c153e395cb105b5a96ffa76be27d1da
SHA1

ab29fa98de5737cc627df0aab29031b40857bc0d
SHA256

e74a3a5220cd1ad859d114131e39a83536b9eabfa2acc4881468cd7c9147b2ee
SHA512

6308f6374db6de4b47f4561df9c791e415b64cf61657e6bbb75df76e93b1ddb7879ed190b884f99a1e6ed8d1246aafc5e612301a75cdf26b578f2992042a85d2
SSDEEP

3072:Y+INQJrRov5auHPnc1cL9CLcYxSqS8ddd0d999gGabrYGHrb/Y4X20xmC:Ysov4IojGCYGvI09

Score

1^/10

Malware Config

Signatures

Files

Umbral.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 174KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ