Group3r[.]exe | Triage

Sharing

General

Target

Group3r.exe
Size

250KB
MD5

6cb2a6aacc99f6ea8e1aae7a259ed6d5
SHA1

4feff77c636ab5483147168b0ec7658064845adc
SHA256

0c43ece4fe585123ac95ccfd430ec7a08501bfdf64dd8c1963352fe0d2f786c3
SHA512

30d77d577107a7c63cf7e5a82422086efd8e6108fbb1b9260dddcd3f4c6ca149e92206f81331c50b67cd646587e819016c4c3b6a5be46b0ffd20448d2134bbb0
SSDEEP

6144:yMnoGnbomMNxhKaOav54Ur87mnGzuO8O9Utfpxs6:MsRMNxhKVo6V7mnGzdUdbs6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Group3r.exe

Files

Group3r.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 570KB - Virtual size: 570KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ