v2rayUpgrade[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

v2rayUpgrade.exe
Size

11KB
MD5

1258948cc75efec8521e139ca8b0ef25
SHA1

43c3d1dbd63ea7e9df062650e2c8d57e280c0155
SHA256

ec021af6e217f72690d93edd690262c9fcf08652f05db03495df5f1e9711158f
SHA512

1a2411bd6ec7daac389599bdb5012bff59f431d23ac90533f3a48cfa23efe857adcee7829ed217e42114c70adf4d82fdd8b809a43e21e3aebd4f7ba6d85c07ff
SSDEEP

192:DPkrnpz0eobCuLJYdqTn+tMhGHEjCXbRVmfef:DcVoQuLh+tMhG2C9Ufe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
v2rayUpgrade.exe

Files

v2rayUpgrade.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ