Volatile[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Volatile.exe
Size

19KB
MD5

608e3feb72a35028eebfb47bb8747d4a
SHA1

9b072d9b1cb1e18ff06f15658f70a1fc325f3184
SHA256

154beb91538a40f6310f31f1024c39c5f5a0b19742ad24080d539032269cb45e
SHA512

f1413494af6ea1d18069b4099c23b0a6dd15bd78ad6fdb33acc8a8d69b040ee39430547214c946a7fe46b0cfbba1585451ce379f8d255e7acace4dc3df4efa64
SSDEEP

384:3BsnzQmEct+B12+/mJKoMhC0PBjT3QV5SHx087AxZzmKAifdt:3BN19mQoMhCwxTMfAs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Volatile.exe

Files

Volatile.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\alex\Desktop\auto\Volatile\Volatile\obj\Debug\Volatile.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ