Evolion[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Evolion.exe
Size

462KB
MD5

9578d1343929b122db11a5a79f9ddcdb
SHA1

cbdb219c60872138cb5ad71ca23aed50385efc06
SHA256

359a42f042d2782241a6a1a185841c58fe06c2f091327a374587a3c42e547004
SHA512

95f56693b1e917ad8c77e1a2fb97ccd606054dafe80197d96e08f91e1043a1b92228e011c7c75b204ae0e1dcd58fdbf052f8a0fe47d8c45834d1aff4ff2db7ba
SSDEEP

3072:D/sfkalFC6Noe1LsVpVS6iasV5D1LEj5uDNWlgd5a/FmVhz55MZuflg:7AHFtoXVpVS6bod5GFmVhz7Nflg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Evolion.exe

Files

Evolion.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 195KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ