AllMouseMacro[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AllMouseMacro.exe
Size

336KB
MD5

915ad057cf79c7ee0c4b51177c5090a5
SHA1

7e8f83f0673f852e17a5180cf30959b9a0cfa019
SHA256

4a55d351de25a9a65589c9ab6bdbc5714ea09bc3ea5a5d702a35d04e7ca9ac36
SHA512

04b73b8d49735d09cbb2d44ea655a223c6594c314d5430bab00c6eef6ee0baf58b40cf18a0edb2a8b4025b37ea0df75146cd108333f5f15a3895225b085c73fb
SSDEEP

3072:Z5PG5FssTE0fezrx9+4tib23Y/fMstqjfg2J34v34K5FmX4+:Z5PG5Fs+EtzrxltAcstqTB34v34K5QX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AllMouseMacro.exe

Files

AllMouseMacro.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Administrator\Desktop\c\WindowsFormsApp1\obj\Release\AllMouseMacro.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 259KB - Virtual size: 258KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ