Trinity Free Temp[.]exe | Triage

Resubmissions

27-05-2024 06:03

240527-gsclpaae2s 3

27-05-2024 06:02

240527-grzd3aad9t 3

Sharing

General

Target

Trinity Free Temp.exe
Size

198KB
MD5

2c458cc5394a5ae64b6cdf2058aa673b
SHA1

dff92910ce895155015587c84974c830c0433e58
SHA256

4967ea75c2121d194eab0966062d5a5f2d6c6d5bf59886e51a6915285e39064e
SHA512

5e9e227f11b3acce8ec8942a323295d76d258f6c46c9953fa8eb8fc14c7bb1199f4b306ec8363368460da476517e3a46a55530be1aec08c21569ab324a175975
SSDEEP

3072:jYvbFEfCMT9szA4tOicW7t9m4WJ1+BRqY:2bvlAiLcW7tBWJ1+bq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Trinity Free Temp.exe

Files

Trinity Free Temp.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\1337\Desktop\trinity free\trinity\obj\Release\Trinity Free Temp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ