Static task
static1
General
-
Target
Andromeda.exe
-
Size
16.2MB
-
MD5
af0d21743cce711871de424a3091f033
-
SHA1
eac2809a3633416f44ed97d5a04cf9e168a7250a
-
SHA256
ba6801552c9ca05b43438974dc3104bfabb09cec3ab643253a175959ce2032fe
-
SHA512
de7816b7f477a8e27d255ed42d51d28b05af67999867b427f1033bd6867a8cd097e3cc3a0a8e2e28dbfd8f4df2a40cbd129dd3b900d02f66907110e0ed087a54
-
SSDEEP
393216:Q3yJOPNTtBI/bTroB6O0oQ8g9EMd4/hlodVv7kEg+Sg72/:Q3ywR6zvoBV0oQ2K7dVvf2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Andromeda.exe
Files
-
Andromeda.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 16.2MB - Virtual size: 16.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ