GodPotato-NET4[.]exe | Triage

Sharing

General

Target

GodPotato-NET4.exe
Size

56KB
MD5

1fdb1dd742674d3939f636c3fc4b761f
SHA1

c0408da553d905857ac4f559b0438b99316f1bda
SHA256

9a8e9d587b570d4074f1c8317b163aa8d0c566efd88f294d9d85bc7776352a28
SHA512

659c60ce7ec7135da4829a4e95e053857f5b12578af4fa61c28938a16e26972d79f9de70d93631a8602d70f217457fb27645853c6d22da3151f6acc2957c0fb1
SSDEEP

1536:U4w3oBIVl1khuu7OlPxLMtu9Zhw8l1+dmgI3E:e4BG1AuuehMtu9Lw8wmgI3E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
GodPotato-NET4.exe

Files

GodPotato-NET4.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ