Solaris[.]exe | Triage

Sharing

General

Target

Solaris.exe
Size

204KB
MD5

ada2b83efeeae654d28476f3a12b366c
SHA1

f50a3272ac218852b571034c917b7136525f61bc
SHA256

3992abd68102217c9aa0aff82d9936f71e77cf4cc450f6801deb6f231aec8154
SHA512

9daafc46e8bfdfa661d25cdd392a3fa9eb72b6c819323994c2d04a622984ba281c9a3ad4f2a607aa4979ff77cc4e3bdbdd32a0989f0fdbcb2832c6b7ddc6af69
SSDEEP

6144:3Rv0DlyxCk/MsduRvL7xocIAwPk6wp/a64:3Rv0DlyxCk/MsduJtIZPkZq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Solaris.exe

Files

Solaris.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Administradoor\Desktop\Solaris Source\obj\Release\net472\Solaris.pdb

Sections

.text
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ