Luxury Macro Exploit[.]exe | Triage

Sharing

General

Target

Luxury Macro Exploit.exe
Size

4.4MB
MD5

22bb8853289bed446fc3d4bfc52cfc45
SHA1

f021536fbc904c9a2a1cae09902c1c2660a4c8c5
SHA256

7a0bd91b7d9613662c5019252c87d7e565e4660a26df6e6914039b0eb27c8086
SHA512

aea422c54e0e73c2a6203a2b62fa4a5d6a4d7da31371ca42ddf41d2e3db844171d7ce21db63fa85705f83a913600dbbb172d65ed105066e776b7ee10a3c3cdcc
SSDEEP

98304:CVjdab58u1eCwZsX72zzTvtqrYujRv5i0MVs+fRrBKyXq/iGyEZcn8RF2nB8SH:CH88u1twZsLKt4RiHnK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

Luxury Macro Exploit.exe

Files

Luxury Macro Exploit.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\FUD\Documents\Visual Studio 2012\Projects\Luxury Macro Exploit\Luxury Macro Exploit\bin\Debug\Luxury Macro Exploit.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ