felony[.]exe | Triage

Resubmissions

20/04/2024, 14:23

240420-rqjmbsae65 8

Sharing

Copy URL Twitter E-mail

General

Target

felony.exe
Size

70KB
MD5

27f60aea40180e5f910db7263599292f
SHA1

967ef1de6eeacd29353b43340df761e37345ca5f
SHA256

780ce0d7f0800e688f240ddfd12a4091df694673c644384b89e006b27791f588
SHA512

3df94ef9dce3acab6ebef0e2f66754bd6f989a6a8ece5e3241d111a441ded2d41b8f85584e2539dac9c1d29fb14c017300e42f27268ba2751da1ec97169a25c2
SSDEEP

192:AufGGZlcdx005CXewIYvnbNwfshWWDOqdZrjBer+Jl5oQRcFjqFx:AurZrc8bNTWWDTZpe4ocQqFx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
felony.exe

Files

felony.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ