PSUCrusher[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PSUCrusher.exe
Size

3.1MB
MD5

a847ee52efb000a98a7e325bf1c76816
SHA1

b24845508c47f3cac13682caa728e0b761fed80f
SHA256

8ecdb204977361b1178d35401da0555d4375154ab907ddea142289446eda25a6
SHA512

c36df8017f33654c0f19567a7e7e63ca4f762df5947c9498abd18d71c93dcc0953819388f98f97d8a9a6b0792dcd9909e3be35d56bebc5b4a8aa427d21a5f2da
SSDEEP

49152:f+7u+PwWRgZtGCpOk4wo+m2goAqPDDwAQ7eW+b2IYGhb44TCcS6zg6l:f+K4gZwp2kqLkVZKbh46cM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PSUCrusher.exe

Files

PSUCrusher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\source\repos\PSUCrusher\PSUCrusher\obj\Debug\PSUCrusher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ