Systemless[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Systemless.exe
Size

126KB
MD5

5e00ee3a1c0743bc9dfa1ea7ff83d5c1
SHA1

6b587a5917c4100b1614cf6f30b76588392ed6ad
SHA256

1e14b077da4ab7365d8d967475ef7553dc592a02ff66a5cf7835d8c23c507125
SHA512

92d02fb89a89831623c9974d5e5cc07d8fc421b7569ef428af59713adc1cffb7473dd6b77535fb5c8bccfbcabb5332cc4c7d01b14c198d99be25c0fc0af766a8
SSDEEP

1536:MgTwxki3Ytyp9WyAkjdwB9BimZBV6UF109gKxH6jz24Xm5jOxB03hsHSr0as1oT9:pTwxWM9ekEBzZBg21owjabyBuxZr/OY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Systemless.exe

Files

Systemless.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ