indra[.]exe | Triage

Sharing

General

Target

indra.exe
Size

202KB
MD5

654cdef7d47fe4c99c4e947012bd2bce
SHA1

81000896b9ac333ffc4558d54596bf6355067d99
SHA256

3892b042911360db339c3ff71d33b33d1e00ff1e7d12c14489e2d49777cfe550
SHA512

a75ddc5ff425d3433454dd0ec18173cffe3381f94c091fa0ea5be56798bab95da6302305e39a297d8c27df3484839bdeea4486a7db0150e757068481873f0776
SSDEEP

6144:68tYebHJCOR1MXTGeBEbW4mO+Zg2jyeL+:68tY0HJhR1Muqj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
indra.exe

Files

indra.exe
.exe windows x64

b4c6fff030479aa3b12625be67bf4914

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jeho
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE