TrinityV2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TrinityV2.exe
Size

514KB
MD5

05c89f28428eda52dfd1efd966bc7bdf
SHA1

3db8cdbbb5cbf108620c4ee3fe57096f0299aa34
SHA256

bb90668f052307b607a7a39ad69e25bafcb345de15cbda767b874a3d3c373cbd
SHA512

abf38ddfa0caefe60d8724ea149fb98f3c05046a46bd4249c69833702ffdfb1d023063b3c9255ea014fd2a6e3d81c298b460428fb3556d0e63a5c0cd9c483791
SSDEEP

1536:OwKmgJDbZA89RNfMdCwg0VzRDWcQjK1/41D0jx0VzRDWcQjK1/41D0jr:OwKmgWrDFJ41D0jurDFJ41D0jr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TrinityV2.exe

Files

TrinityV2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\stake\Desktop\TrinityV2\TrinityV2\obj\Release\TrinityV2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ