Astro[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Astro.exe
Size

270KB
MD5

2eb85970e9f595bc1c8b4f8964b04533
SHA1

c740c188f38a3cdc68a868296ecf2ac3e54ade79
SHA256

f3d4961df9750a49fb3d0410ba05da72c22bb94ac5fa1c0b708b22107d06e510
SHA512

42723b34005eeac659f1bb8b25e81302ac1055c733061d3ae26db158663577282b584a337a0d482d39d413b90f4792b5100d2e3b2aee6afad474cab62111d3b1
SSDEEP

6144:3KWwq4gcAChu/h60zreVwdraaHZ5Zywcrb8PgJp/GvST:3Kn1gxV5Negr7jcwccPgJp/GvST

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Astro.exe

Files

Astro.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

K^z#iaDL
Size: 214KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ