Dominus[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Dominus.exe
Size

582KB
MD5

1ec500d2da28e8cc4629870895c69990
SHA1

c43b1dc48a529e5342bd1f1e0c466ed2bbf0e707
SHA256

5d212f86fe251d5b8ea7dfa950e4d397579f1348d5bf4b48cde184157dc6de22
SHA512

1e44df1f89142b5a29b06457077a84518debc822ebf6f5f754c43bfb8819a7e72e9b3bad0f8aa1ee5a876aee54a7891b0a04221785206360810a812b42f1c324
SSDEEP

12288:JUDTHKf+TmxxugOV9pHt9pP9pf9pP9pP9pT9pd9pP9pT9pf9p:J0KmTmxf6DNDPDfDPDPDTDdDPDTDfD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Dominus.exe

Files

Dominus.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 554KB - Virtual size: 554KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ