audiorelay-backend[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

audiorelay-backend.exe
Size

16KB
MD5

7e900546fc324ae9ba89c78e9ba75c7a
SHA1

edc92a813ad5ec75fc4288ff51da62153a7666a8
SHA256

460297b886eb8c0ddac9a000ca689f8874088de216dd3045d7b712952f8b06bd
SHA512

d8da9791dae41ba652342dbca8e2d2e61c2641b3c1cca5d6a7239c2c2657a7179b3934033413661edb60548c3ade59b400f6ab641a5a14418394ab56a2167a96
SSDEEP

384:j+ZnJ1HZFTBL6qkL0UcPQzo4AFRCnxstoWiB0ptYcFmYW03K:jk15FTBLhkLMQHb2WWSQtYcFmYW6K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
audiorelay-backend.exe

Files

audiorelay-backend.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ