Erium[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Erium.exe
Size

2.2MB
MD5

6bb6cba049dc65c216d463e3add84886
SHA1

08ac2d2f1b20601bc34fbf7010287021f3f0d9c5
SHA256

1a6d871a1942d5c164b38a4232c5ea76f9ddd8cd69f787086649af3335333a3b
SHA512

9e5fcc539c84f7dc926fa801c14e76b129f30e0a1d3e9a41def30c42b3180c27241301f647607ef334c63777bea6db25ff34ac5975171317415e2d28c8ca1f5e
SSDEEP

49152:mAeeeeRgtO2/g3kAeeeeRgtO2/g3kAeeeeRgtO2/g3/LeeeeRgtOP/g3:mAeeeeRgtOmg0AeeeeRgtOmgUAeeeeRI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Erium.exe

Files

Erium.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\johnn\Downloads\PassIs123\Enium\obj\Debug\Erium.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 528KB - Virtual size: 528KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ