Voidss Multi Tool[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Voidss Multi Tool.exe
Size

8.6MB
MD5

b3e13f805e7e38b61d4d94fcb84638b0
SHA1

c6df981567651307433d561e3ee453d4640a80a6
SHA256

5b36bd245a3a1da9ca1b5deeff067eb28ad2d6bb7cf24d1d6b1bbfff02aebcdc
SHA512

7ec9160f02a37eee5dc70f416b97aaeade776e443bb24cd15ff86a38efcab365399e7cbc9951639e66efaa605d3c86df2fa88aee8e401cf63283b9f61173427e
SSDEEP

196608:1G2mhBR1fhTzvvWX7h9uB4qSHolesN0KIRI9wThigtjnL:AdBR1ZXv+Xt9uljeDKSvz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Voidss Multi Tool.exe

Files

Voidss Multi Tool.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8.6MB - Virtual size: 8.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ