PSUCrusher[.]exe | Triage

Sharing

General

Target

PSUCrusher.exe
Size

3.1MB
MD5

661cfd2d5c8e925829b1ccb2561cd993
SHA1

70e4dffe8368f8597616b195f48aaab2ce542075
SHA256

81ba79b46a50b5439e14a1b777180bd17748038b04d13c46532d9576c9a39279
SHA512

5dc73ec6f0e7c81e8339b0ca7ac4b6d8f728f328c91a2b139d770c93a9ff6e1631cf915553d7fc45b2193a1d82ac77769b04347af696972482e8df81afebaa0d
SSDEEP

49152:Ff7u+PwWRgZtGCpOk4wo+m2goAqPDDwAQ7eW+b2IYGhb44TCcSlzg6l:FfK4gZwp2kqLkVZKbh4lcM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PSUCrusher.exe

Files

PSUCrusher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\source\repos\PSUCrusher\PSUCrusher\obj\Debug\PSUCrusher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ