ソルルイ-after mini-[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ソルルイ-after mini-.exe
Size

141KB
MD5

ed5cfd043c0805cb146b9b66c5e85a23
SHA1

d367d33aac1bfce835969c2d79e9692d5ad22610
SHA256

f88ff2082b6d4d6ad6ef0da7fa8c8de9c3cc66981c9644ec5a2cf7e8bab68f0b
SHA512

67f2b0bfa73f8cc1ef3e90cbef442390a6869104d2b728abe3ccb3da985db00544def95c951d265befeb942de29dd46d43fa4c97afb8969142eb2b40ec4abdce
SSDEEP

3072:3ugnGlrzTgRbTdNfFugugnGlrzTgRbTdNfFuD:TnPRbTdNfFvnPRbTdNfF

Score

1^/10

Malware Config

Signatures

Files

ソルルイ-after mini-.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ