Venom Beta[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Venom Beta.exe
Size

1.3MB
MD5

1df2b680df83f4e1461356b5c67d3828
SHA1

4e3f905e5db457ba3225f4d2a540ac29432b5839
SHA256

05a7ac24beae612b062a0f00185f97fb436e85de3ec7dbc289e870989d673cba
SHA512

9ac59b81d75474f1085235fd83b76b3847a53027473c4b8cfca55318874a864ce82752e8296749a0c0279f45b317c40a388b5d91c012d10d16f59f4724b47c7d
SSDEEP

12288:ZEh5iQRSelQ+8Jz8nQ3+3Xha12IPHLTyj7606C4n4yIscfDd2B7P2:ih5iQRSea+8JmQukNvy6f4yIZfS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Venom Beta.exe

Files

Venom Beta.exe
.exe windows:4 windows x86

Password: 0045

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ