35b5f1ecbedb1bd24453420b7e34d743ea9af6cde269eaa20be9ef81775de6e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35b5f1ecbedb1bd24453420b7e34d743ea9af6cde269eaa20be9ef81775de6e2
Size

2.5MB
MD5

60788d9aaf351fd3d262b7465df7b8e5
SHA1

c69d189f0c68b6d937831e5cb4df543426a89aa6
SHA256

35b5f1ecbedb1bd24453420b7e34d743ea9af6cde269eaa20be9ef81775de6e2
SHA512

9a125b7200ed7da59088d168573bd6cd53b92e814c3552a9a9bfd6187608e4bca0938b5039aa33a2f19dd9bfb8a51a9d1a4216df1e5e9899c90b18436db4504b
SSDEEP

49152:RmlkqXfd+/9AIUbowEOvygS7/1sHOqJ02nTPFdRPqxMaivHly8Pv6Uc:RmlkqXf0FvUcwti78OqJ7TPBvc8X6Uc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35b5f1ecbedb1bd24453420b7e34d743ea9af6cde269eaa20be9ef81775de6e2

Files

35b5f1ecbedb1bd24453420b7e34d743ea9af6cde269eaa20be9ef81775de6e2
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Projects\Millenium RAT V2.6 - optimized (project) — final\Millenium\obj\Release\net462\conhost.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ