EvoUnin[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

EvoUnin.exe
Size

121KB
MD5

59737c03186b43ce897a324d42274960
SHA1

ad66616209c5ab29bf9c26b0b5286cec003c6572
SHA256

20865125cc6c08c7d8a79db3fc60c0e52a373702ae2da291a3fdcabda8498ee9
SHA512

fc215278dbe300533ed8c67ef02dbf001d446f2ff437227b69c723e6c8a74976653f1d98ceed29aaf44655473f75bdaa1624a8fc75583c4ae0555bac40033908
SSDEEP

3072:lh052fvh052KwSb/6eB4ePPPETY0vHdh052M:3UsUWenETY0v/Uv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EvoUnin.exe

Files

EvoUnin.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ