EightySeven Mods[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

EightySeven Mods.exe
Size

8.6MB
MD5

0e5ea0938cb6a5205345d656817fffee
SHA1

55e3f88b3c2d4af52be5ce7f68319dde83a61882
SHA256

bb8bcf102d286a15cad47bee5531f2d8530be23b39f561a8eabf8458f1edd849
SHA512

a65b278da770850f17aa4f6f54c73413c65210cbeea33fbe57ab7e4f80d99f817d834d6b33b73d4549dc93fb618bd03dddddbaa5bee24a8370475f0e4d29addf
SSDEEP

196608:4KuL8RZBx5YmPI4946jtykSIgpeVxYCp:HQ8Rx5ooTykSppu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EightySeven Mods.exe

Files

EightySeven Mods.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8.6MB - Virtual size: 8.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ