Vienna-EXEC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Vienna-EXEC.exe
Size

1.7MB
MD5

95cffd34ee6c21a37bf480a2be96e608
SHA1

2b8858a030499580620a0889f57015a1eacc64e4
SHA256

24936fc61cc4deb650e6c0194ce69e41c36cef95956ec370a16ef34a3bb58651
SHA512

a4b50da90cd18fc3b32dc03a136478e248e95dec4fd30a5e30e8f9f2c36cf9aa01a29b7ad0b6da22cec3f617b3fb027c7cd8c9b985c539ed6a75634f98062888
SSDEEP

49152:CEHkbd6kDIOvl0XP6l1/J4IXia8+sqVdx3REShpa+Z:htksO90XeJJHia5sqV7RESj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Vienna-EXEC.exe

Files

Vienna-EXEC.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ