Venom2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Venom2.exe
Size

56KB
MD5

59d0630c399e67c3d782296c96a4a979
SHA1

08995d8b754f4906b0178a9acfad5f9377bd2433
SHA256

587e7b53aa25dc0a426c5e385a275e366b9bc203f7a0027a82dbd7a702909468
SHA512

a5556f6f6eb2cffc2ad6be05114dd1340d217bc6eb7a7a32d496c1cc9a5469bcd1cc93e4c1bf5d50f546c9b119b3dd4980561ce5b61c6e999fc3745379bda04d
SSDEEP

768:4y2UuadGwDOyNUUY5HzBE+bk701P174h:4rAXDOgYh2+bjp4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Venom2.exe

Files

Venom2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ