Stopx[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Stopx.exe
Size

678KB
MD5

079b5699366036d0a9de0a0593bdd44f
SHA1

0c3cabb85f3611e119933eea5aac55345cfaad99
SHA256

08f0917fcff0a83712b245fe5d52b8ea5b856f219e10022313ef0c85b1071144
SHA512

0a0e6ac9baeaa7fdce5bf4e9a97fa660c3ece0499449caa2ce8e430c18b2820bf55322e49dbd1635bffb678f91ccd15d6b6472cea526b938f613139bf668e3f3
SSDEEP

12288:YdB46Z+PUhgqXxzq1VTMSE3vN+FCtkPcqB4kfJoU/EZu:YdB/+8hgqpm5AvypPcqB4oI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Stopx.exe

Files

Stopx.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 675KB - Virtual size: 675KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ