Anti-Atacks[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Anti-Atacks.exe
Size

242KB
MD5

cb9efad068d66628869e5a4e39303b7f
SHA1

15f045d2834530f313de6555463f16bee4a88251
SHA256

0aa7581490df5621d5e9fccd1207cb628af14eb71b4f158cce3dc37431f05d45
SHA512

57b7516d758b174c0a236097f190acd5fa40dbc3104045a3882ea3a994bdc30b39d65aaa03445e0f548b3a6f005d364e0ff02e1d9053e0b21484519b887371d3
SSDEEP

3072:/PFab71EhzAhek0cEyuRp1n69Lyb3QFBsHLVWFUnQGgoOhw4fihek0cEyuRp1n6j:/3CIguFyLIC9FUnj74fiIguFyLICo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Anti-Atacks.exe

Files

Anti-Atacks.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ