antagonistt[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

antagonistt.exe
Size

41KB
MD5

5b64d87db888727dc82fb634d2af8cf9
SHA1

a00ce1601c725b90a83cf3c3b5c40d53ce2f1f59
SHA256

3d515e27cbdde0e3a530e5b0b7268a687acfc922d2c2603e9d6ebfa3eda299a8
SHA512

b9152adc94ba316e14ead0057c715c50bc63ea4936f0f11a169e12811d7f0f8bc8bd60a4585cd40f40d00dd7e06c28b019e4e8c0c391ee5ac41caea005f7a0cf
SSDEEP

768:qa7HmiY7iDr6pKp26SirufR16zRqcVrwjhORaNIVIbEVH8vYH5U:CiY0ryA2KruJ8zRq0wj4RcIVIbEGvYG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
antagonistt.exe

Files

antagonistt.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ