f8ab374317daa6e6e08543fd78da36560b2e0a01eb666757678fc4b0d153c78e | Triage

Resubmissions

03/05/2024, 23:05

240503-229b8sbc59 10

19/04/2024, 09:29

240419-lfyqlsdg46 8

08/04/2024, 06:13

240408-gy9hlsae66 8

Sharing

Copy URL Twitter E-mail

General

Target

f8ab374317daa6e6e08543fd78da36560b2e0a01eb666757678fc4b0d153c78e
Size

1.3MB
MD5

878e1f1d472b786f4676c37e7c054616
SHA1

541533ab23e24f212e0e3bbaf24abf43409d74c2
SHA256

f8ab374317daa6e6e08543fd78da36560b2e0a01eb666757678fc4b0d153c78e
SHA512

403a0cc0bd297e84d5045445de549e23ef65737e389868392f14694c78ce89112d06475c55a8af954d248502305f6263cc8d2476a2ee5f3dda0753f840327080
SSDEEP

24576:h03laoFFzC9GPje2UjeHA6KvwWnNUbsAy6xYhaHKO3JM/Cm21f5jvs1i65HV:h03ZU9GbGj6HKVN4YhwvZMKm25gBV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8ab374317daa6e6e08543fd78da36560b2e0a01eb666757678fc4b0d153c78e

Files

f8ab374317daa6e6e08543fd78da36560b2e0a01eb666757678fc4b0d153c78e
.exe .vbs windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\MJMOD\Downloads\droppor\Venomous\Venomous\obj\Release\Venomous.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ