destroyer[.]exe | Triage

Resubmissions

20/04/2024, 21:45

240420-1l8v4aag78 5

20/04/2024, 21:44

240420-1lpr8aag66 5

Sharing

Copy URL Twitter E-mail

General

Target

destroyer.exe
Size

12KB
MD5

0855fa2b783bf0437f73d7d6abd8f516
SHA1

66ced8ea8f0564f1d33bc7e51746d329cd22e64e
SHA256

3c2c695ba99c0ca12221cecda6cb8261ed0735a062d62f801317e2c9b58f6468
SHA512

128d2574629e2411150447f5c0524631bd7ebd888019498aa9824bb9cefecb588e8e052faec9e9824106563237e5a38227f5e7b7610b7c28d7af16c6c726a80a
SSDEEP

192:hFLcRdp6T4Y3DI/T0YmYV52/Yu3hIWrklaadrq8uSF3k:hFLSGT4Yz8T0Ymeo/33hdrklJUSF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
destroyer.exe

Files

destroyer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ