Aorist_Cracked[.]exe | Triage

Sharing

General

Target

Aorist_Cracked.exe
Size

2.8MB
MD5

5963a9a271b685867ab6283af2cd1705
SHA1

4dc28e29df30cb76aa397f35f86ea3dddcf529bd
SHA256

5629694aa19e8320bb7bb5ce2d99b6996d7abc665d9e5ebf7e8330632b6f5f77
SHA512

f7690f1bfbc2d77675dcfa046be24ca0f3ab8d6d383c65d7b22398a3d11004834a4367e6377319470e9a71e4d2acf6cce5de910ee6cbc04fe2400bdb72f684e8
SSDEEP

49152:BITYbNbNWo4kSH3OqtwInrgBWBKH8jkDVFCNXODzWS9HfX0H:BIT4bNJFY3Oqt4+KH4kpc+DX/0H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

Aorist_Cracked.exe

Files

Aorist_Cracked.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 267KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ