TrinityV2[.]exe | Triage

Sharing

General

Target

TrinityV2.exe
Size

516KB
MD5

78b76867f6fc4770ed720616230292ba
SHA1

a6e2cdae0dc8f8ad070ee1b28337036a457e45a2
SHA256

97f2e56dc51fe8d315b213597e35d5b2f5cbeb8d71c6adfe7a0b9d28c3c9dac9
SHA512

99ccd96909f3f31d6fd06150f206c72be4d33389b3f6786c2ae3869d0e9eb19a031522b9220fb3651e283d30afd930d79acb9d68b1f21e2860e5f0859a4aa55c
SSDEEP

1536:UBLUVVU+Gwi0VzRDWcQjK1/41D0jv0VzRDWcQjK1/41D0jrCtVcl:VrDFJ41D0jMrDFJ41D0jrC/Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TrinityV2.exe

Files

TrinityV2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\stake\Desktop\TrinityV2\TrinityV2\obj\Release\TrinityV2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 251KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ