Zexroz v0[.]1[.]exe | Triage

Sharing

General

Target

Zexroz v0.1.exe
Size

3.9MB
MD5

d05924fd9e149001415a02bddf866d71
SHA1

10f93b55045d259388645705edfd806b1d9ed044
SHA256

365e29ce830544ff278c78b99c600d2ef0396cf574fa486d1e13cae1724a27e5
SHA512

e325fd7a8e3a126366bb6204ed41f949cce7c1fb1189ff2f2d77c4fd6ce67b4fc7ce34c810640bceb1541bf96caff7e927e00ace95f6b805338e215b0f037e5b
SSDEEP

49152:aMRZbEgTIrJWt2oH/SuwqCIjGUYvWHfNoW7IHpNdxr1+Iynau2AKgrgAqF0Ta3Fh:aRgTIde9CUY+H7ILL5/eD/r9qy2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Zexroz v0.1.exe

Files

Zexroz v0.1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.T%|
Size: - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.;:+
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.!iL
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ