Virus Maker[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Virus Maker.exe
Size

4.1MB
MD5

1cd802405cdd242064ae176ab91657a0
SHA1

4a0db4aecb2defd9339d82e0343c1eb3986dc682
SHA256

02c28077977d3903a5e6937fcd3a03e1acd447b318bd69b37b39b356de6c2910
SHA512

25dbc00a536d6fcecfaab417c3bc5d1b412a6dd3f17b8b0cf2c5a85587b6984ff2ed6e2b4ccf551bdedfa956b39691cfb0a6fde6bf3cf20034a72e42f5f0f353
SSDEEP

12288:7tX9kL8ojOBOvnv1vuvuvuvuvuvjvGvVoF:7+8LGvdmmmmmDe6F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Virus Maker.exe

Files

Virus Maker.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 366KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ