Crasheador[.]exe | Triage

Sharing

General

Target

Crasheador.exe
Size

114KB
MD5

ea1cf6f29477ace4f72caed828c47db8
SHA1

c93635947cac70cb151616ca6ca8615172ba1411
SHA256

693a5050c07372bdf882a206774077315d654793bf72455be9e3751a39fc8043
SHA512

494936cc92db4272082380df9d7d89a4bca5e2cbdab902fc3c0a2260e85c75f058f98c206697b7018db146fee6de18724fa538e82f180284f012fc6fe9585125
SSDEEP

1536:kFN5OuTcjCNON9PApu5OuTcjCNON9PAKn:ohcj0wWEcj0w9n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Crasheador.exe

Files

Crasheador.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ