primordial_alloc[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

primordial_alloc.exe
Size

313KB
MD5

c6315f24e96b66151b849110dbd981ff
SHA1

db5383dd5282fcc2bdb807b48c8d3310bfd01d06
SHA256

f36e8ad5bcfb0b914d8ed64f63e9e86787561785a8d1d38ebb443e86218c89f2
SHA512

7ac6fee8f6f98db249fc8c5d891baf2169cdbb49db5af3afa0ff0b0eea064e120d705f63509483bf79c35e47af804072c92fefb8a80b4aac5e5b7d96915f9b01
SSDEEP

6144:U/bKlK5PjHhemRPYkEX7NpcGeZJD5pUAy:UTKw5P7QthpB5Ay

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
primordial_alloc.exe

Files

primordial_alloc.exe
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.kbvtrz
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE