Sunset[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Sunset.exe
Size

1.7MB
MD5

c8fe745ea0fddd09809adcdfaeb44284
SHA1

042810b43a456991bb44b75a7e42a7a90b857a31
SHA256

6a66c677451d2be6a0823924817d7bb758aa1edae05d7035da63ed2154115fcb
SHA512

970002758e79f4cad5a7c3a1abc8dd1ee1a01c3adbb0f3c76481f973aab3bf3408e385b72c67ccb6fdc7a0ee7c84324e1e8ffa4814c18c39a91319753b1f11a5
SSDEEP

24576:QJAP+ZwUw7mxpsfw+Jwz/S/6mxPolhJAP+ZwUw7mxpsfw+Jwz/S/6wgh:x22TYsw+W7SCmxg+22TYsw+W7SC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Sunset.exe

Files

Sunset.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 817KB - Virtual size: 816KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp0
Size: 906KB - Virtual size: 905KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ