Psychomeme[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Psychomeme.exe
Size

50KB
MD5

886a00f25bd415debf5176ea703d2fb2
SHA1

dc7511e70ac94ea9e1f1abc01949fcd3bea971a4
SHA256

a35a9a452ef729ad2200c3f737f5d0d0f39a438cde99c392f670242976c6d80c
SHA512

e64fe4d484017b8c85967734415d291585c606f32530a3ad4fbaed0959e8c34551b6fd844b287dc98dbee3941670dee38932e18666383ac50a18f20bb1435c2c
SSDEEP

768:cIJNOV9TdPdbcsL5Z+gIKOjpY6D0oyxAowZAGa0fbQLs:DJMVJb52o+pYKaXGcLs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Psychomeme.exe

Files

Psychomeme.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\source\repos\Psychomeme\Psychomeme\obj\Debug\Psychomeme.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ