Vortex[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Vortex.exe
Size

69KB
MD5

a9746e20d6276fc0098baa56649ea397
SHA1

80b609c3a65a05c4d66aac17e7ac099f43ebb33d
SHA256

e1707d88a192d331ef4c36b799eb031c2e9c2da0a1ca8d146325d81131c3831d
SHA512

bce4b9c7277134141643e2807649267c3dcbe7c758bf95b03443d42de72ac2b1e7f942b2e911edb1345561f1965aa379ac0e1b0686a77a390f482f246539f757
SSDEEP

1536:gtKenoOUux9mNYft3t3K5eKuiRC7MZn+RSQX9v:BenrUQm2ft5f5iCMt+gQX9v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Vortex.exe

Files

Vortex.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ