Dominus[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Dominus.exe
Size

587KB
MD5

f46a98df7d0626c3339c525f16e5af2d
SHA1

de3be8f6e4ca2f0c8de22d3b1627d452b617975a
SHA256

584f27e8528835474e06154c7a34143df2a4daa6eebff3361d68208e755c0fd4
SHA512

49a3ee3c434d3d43c846cd60baca238e3a55b90604f8261dd944acaaf5623f7ab4e1e2cc8233b2c84c6c578ef2b51ea3de1a9c5daff9cf7cab37ea6629bf8bdf
SSDEEP

12288:5UzQ6QojRxgv4Mq0M9pjt9pP9pf9pP9pP9pT9pd9pP9pT9pA9p:576QojRx043DRDPDfDPDPDTDdDPDTDAD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Dominus.exe

Files

Dominus.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 559KB - Virtual size: 559KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ