Vessel Particulars[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Vessel Particulars.exe
Size

696KB
MD5

64e52de860a554a4e4986d44fed67f4f
SHA1

0d43529982b66596c2b118f44b9b0b341ce6c9c2
SHA256

c3a293e618862269f76436ad1a144fe2113b0f5207c4cb3c45048ba198574a03
SHA512

9599d80d6fbb4b2e5540c9dad058577fff1351591fa19825176d265f7f9478c1d4da4d494f171d6b48ce66e73091f7eb908ee02876662f9657b5b304b2e4a4dd
SSDEEP

12288:5soyQ4yiK45/Rng8VieSbZIITqCWYiuPn7GiibPPBkhkBaBSfmeZgY59gupYuFAW:myiKA/Rng8NS2gHWYiuPn7Gi6BgB41Xb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Vessel Particulars.exe

Files

Vessel Particulars.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 694KB - Virtual size: 693KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ