Poraton_Support@Cyberfear[.]com[.]vexe | Triage

Sharing

General

Target

Poraton_Support@Cyberfear.com.vexe
Size

121KB
MD5

9eda69bc6d42ff0a9a56d74fb06a6c01
SHA1

6a384ff0d66089bfb89dbcad8f0a90482160c6a1
SHA256

34b9f323d2c6d4fc334952c365b678662dbd00cdd03babbcbe258a0ec053ffa3
SHA512

d192d9adcac22f429478b82e9acec92a1d1a9c2cfb65cb6e525443b5be1866baadac345f7aebe36f75563ffa05e096b09a94c9b30665336f9c82576e4efeba16
SSDEEP

768:M3SOA2NuHRZR4EnzsbQU4nNaFAVVnSIWkJ5gwE:T/R40zSEnNNVVtWkJKwE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

Poraton_Support@Cyberfear.com.vexe

Files

Poraton_Support@Cyberfear.com.vexe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ