Allergic[.]exe | Triage

Sharing

General

Target

Allergic.exe
Size

4.3MB
MD5

833a4c4844cc8de05d0338338088b5ec
SHA1

745de3b02afb8169c3c464faf5a0ac2ecf49cebb
SHA256

48c8a4a6c7451ea92d81d9e61511709c9bb6dfbc5b3480f12e3013e83515d204
SHA512

7d8077f12e21c3f9f8a37367072bebb82a2de3628e7f9fccfc7f43e061a1b64fe8e575d884bf3f352509c1cdcf6f5d72e89e64760c0477f53cce8579697c801e
SSDEEP

98304:8ZzmYBPOOWzq+io27lBfO8GUsiW8NJvJWZ3D4bcf/Qi:8ZzlBm+fo277bfN7WZ3ucfoi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Allergic.exe

Files

Allergic.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ