Veno Temp[.]exe | Triage

Sharing

General

Target

Veno Temp.exe
Size

1.4MB
MD5

b5bc56fbd295b233e6f4ab0f8896eea0
SHA1

77bdcf51d925c3a311a4ff42a8ead70a901740ea
SHA256

58308e502615e8ee156236802f03bf430421381ee4786bfce3e994787db96dc5
SHA512

933d1368e8212a80c044dcc0de6f4e52e7b9c18b1a5469e828a37f6d778a8ac33ebb6cec9d7b6c5ae90d0bd40178bf34289750088ec5899feef259e307c3a9dd
SSDEEP

24576:aaAITMvRFhRRbNWoCfkYSEH3OqtwIuXKkqjVnlqud+/2P+Aga:cITYbNbNWo4kSH3OqtwIjkqXfd+/9A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Veno Temp.exe

Files

Veno Temp.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\new36\Downloads\Ve1no\Veno\Velocity temp\Velocity temp\obj\Release\Veno Temp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ