Medusa[.]uno_Beta_Loader[.]exe | Triage

Sharing

General

Target

Medusa.uno_Beta_Loader.exe
Size

862KB
MD5

1fe6fdf4fb30c16a151ea9312a97aeff
SHA1

70daa22008365ffa30e31ba9ef2cdca193a4ada7
SHA256

2bae45ba8922e6d41ac92407a53435511a00004089b61cd534e3093912f614e0
SHA512

3f01686c092c80b278b64b9e5542835f543f9fade43b2bbe4fa805f64df2154d88ae2d949b005ce6487aca03771cfee682b28c0ace42a60afbea232378937139
SSDEEP

6144:xOJ0eqS481vEs+r5qzz1vEs+r5XNtvEs+r5qca/ao3vEs+r55IvEs+r5MvEs+c5I:0JJ9gtqX9gtXvgtqT/gtQgtigMI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Medusa.uno_Beta_Loader.exe

Files

Medusa.uno_Beta_Loader.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Hiorac\Desktop\medusa loader - Copy\Gamesense Loader\obj\Release\Medusa Loader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 744KB - Virtual size: 743KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ