ProjectStar[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ProjectStar.exe
Size

641KB
MD5

2ffecb41a1c5824a89e80f8fb776c341
SHA1

8bf970e48ebeca7788b8087ae50c7e68d2714e7e
SHA256

1bba1fc5d063d09dc429e4d564e096c638f9a886dc69d2cf54b27b9a68b51c67
SHA512

f7572a943af28d955c714becc6d9034e09b352eea45877c99b0a0d4faadafd6aa92be891f6b8b1aef7b014992d977e9b2e91e7814215d3cce113b85a3c7369ba
SSDEEP

12288:nWRYUyjhuOm0cmdedcByWvMf/XopHcecEEIggjml7gA+a5xM6JnM7AJCQj7W6ZCC:nW2UwUewoBEf/Xop3If+mlsATD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ProjectStar.exe

Files

ProjectStar.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

f<WI_X
Size: 505KB - Virtual size: 504KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ