Valhalla_[.]exe | Triage

Sharing

General

Target

Valhalla_.exe
Size

2.6MB
MD5

a1259f366f5260966f2ab003d614a394
SHA1

cd77b0a83d61e8532a6c2623006ca7924c7d991d
SHA256

427d60e19ce674f0b7ea11644a52eb73ea26695bc0758591f96262f4818659c2
SHA512

344d7fd4b14c8bfb0cf19fc8e218eb3951e6d1b77e8da7101139211bcb825a6a2515700bcdf85191a626c10bb8956d86fde900b05adb4293938c40eb92eb56ea
SSDEEP

24576:ZpovMxG2GAbRyOizlRVoHiHxOe6Gaa4t9j0MJIc9yOjdi1ULYtqcVbIGrCHXbnxU:ZKksAbRZiznVoHi4IJejS+V01/ocT8FU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

Valhalla_.exe

Files

Valhalla_.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ