Disunity_[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Disunity_.exe
Size

483KB
MD5

cd8c0e0a875d454659f9aca4d3860af4
SHA1

7b87bfe67d32f0fafb0d1c2225b4e0c8c842b40e
SHA256

c9ebb21a6fc2801781e5a0510539ea16c67a8ac21d1e3d0d6505f6541e7bc766
SHA512

0e1c6fdea8aa7486a7cc361750dd27d5250e5d3764710314606f4cad1c33f710c5bf0c648faa8c737bade9dab53f9b618b6f6e71d58f4580a37354cbf9fc4277
SSDEEP

12288:1AwH6Nn5FHhxQ/0nfDKWbawegIjoDJU0f9gS:mVFQ/0bzKgIsDyFS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Disunity_.exe

Files

Disunity_.exe
.exe windows:6 windows x64 arch:x64

451d866b4efa94a7bc82411ccd80bc6f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetModuleHandleA

shell32

SHGetDiskFreeSpaceA

advapi32

RegOpenKeyExA

user32

GetCursor

Sections

.reloc
Size: - Virtual size: 504KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 481KB - Virtual size: 481KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE