ss[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ss.exe
Size

6KB
MD5

5af62ecefad36e6e243ff519b522f265
SHA1

fb08054eb26a90d16ad78e41ef850f5b9a9bf85a
SHA256

deab1d8f2ab0d803fd35100c3c76a7d3a917d81796c6ddbba657659f4cb0c0ca
SHA512

54dd36a204c0cd61d5cc5df3fddd6aa63bd3642234754fdc4914662d0a602e345ff1b1c90123d223d87536a8153bc1d4252fac239e0df3e2230dc7d735353d86
SSDEEP

96:5UL11XczPiF42T0cXikX5vZ4eKVd4ihszNt:5y1iBc0c/5Z4VMihW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ss.exe

Files

ss.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ