PROXU VIRUS[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PROXU VIRUS.exe
Size

573KB
MD5

49dd3a632c203dd22f4f15c5b88d5c5d
SHA1

7a219c1c6d3a00282700462d4fd8d4b7efdbc5bf
SHA256

5067cce03da41aafafccda4dc413da7f49ebae6ddf4605b5518a18d28f2cf51c
SHA512

d56038934856b1704fbbf3b0004d0102af988f98f11b394649e2bfe35b80ce6ee273c2e9e823e96d73f0746c742cc72cc4896e89a47cf42e352cb428e86e1bc6
SSDEEP

12288:gv/4vhNOPaHhD6jRku44JHy5pH/ZKJ95B1or3w8v:gH4vvO7lJHy5xZKJ9vkv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PROXU VIRUS.exe

Files

PROXU VIRUS.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 541KB - Virtual size: 540KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ