Melody[.]exe | Triage

Sharing

General

Target

Melody.exe
Size

18KB
MD5

225f05b5101db2e5a2040243c3e04731
SHA1

ebef9d1855d80503884edca72ccea5406213c88d
SHA256

2800619af1e58a87f7fb7a379506c55e5bac5e073d2abadf5f282a9e86f34998
SHA512

3c3d8f7d8e2e681d64b07bc790611607c7aa391fd025c9494d3b72fd21d88b48113693f9bdeee09859faf07f6f886ef7a4af5ccef21d1dcdf91e8ee763c8a929
SSDEEP

384:Wn6reJMtFpLMh8c5LctsfYBBNPsk8N0KMwDgfl+sNC20alpYcj2qC:dNtbLcPkNn8N0KMwDuFNC2ZvYcjLC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Melody.exe

Files

Melody.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ