Макроскин[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Макроскин.exe
Size

398KB
MD5

71539f687ec4990c532a0c0632c14031
SHA1

266633ef53d29bd1b71c3eb85ac40b225e391d94
SHA256

7eb9b2572f43a207b137afb2a1f9f83e5979be32cd93af9862e180fe2c6b9479
SHA512

b1697152eef95953403fb73f1d60fa6519dbb22984c7b0c8d7bc40bbf4cddfa108f3c3c578d5cc07c354a0c76573ab4e1e13d1b6d3c5f5de5abf3259a372186b
SSDEEP

12288:BfNDO6WgVKJtdh31yNamkcJZo52EHOtXr:jQgVCJcJZVJZr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Макроскин.exe

Files

Макроскин.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 387KB - Virtual size: 387KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ