SUS[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SUS.exe
Size

40KB
MD5

20372aa1759d47eca770160cc29e171c
SHA1

25f5e4d9b16c55e1c13ebd6ffdd7aaf141c5c7af
SHA256

cfb5d339c4c50ceed499b9e91ce173c8d90eb5a37e43bf1b02a4c4ac6a39013d
SHA512

4649fefca77972545f935656eef0be790ee68ad3190129de29256ea80c1b660d67e603e0c88df42208587950191caa3a3a866b31e60364d6a2c107bd89b1abd0
SSDEEP

768:H4CZFaGi8FkuQ9Sx8x3opRVD0r8tpQWAbLm+u2Yl9l:HtF1piuQO6opRVwr8tmWAbLC2Yt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SUS.exe

Files

SUS.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ