Storm[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Storm.exe
Size

2.3MB
MD5

5625356013ce35f46dcdeef257cabbc5
SHA1

48fa159d87d77eab274c82189109ad956af2ae96
SHA256

0f2bbbbb7057f520b8d3574b856fe7ffe58eb98752f559b3ce456f6c98f9e9a8
SHA512

61d36b45ac5b4a3c0ebac17a482d08dfbb2b21edb8ea0b8c5c6f5c513cb771a3d0170ac602e87d294f8eef6123facbe873fafcf41e65bd00da899f806538d9ab
SSDEEP

49152:hXE2wKffMk7thyuZsV5O3Y5Q2PWm/7TD0NEh+PBqydQzXTLaikfMq:NE2bskWSwAV6WE+5qydyjLAfMq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Storm.exe

Files

Storm.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

!Sugar
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ