Vessel Information[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Vessel Information.exe
Size

491KB
MD5

c8abedc3a125a6e810adbe7d4f95c04e
SHA1

ddbb534e755e9c214ef7ae4a158762c2fd3541e0
SHA256

0de837adc569bde570c415af794e2e43b632013b0cc5045c94ce3d0b11de0cbd
SHA512

135d9a9f4a6c334b0e1052235099a50fd96fab653d098a46277da9de1e8e1f9d73102591b97030bb4198d2f70bfd8dcd31280b94c519539a2a29a37f9f736f7f
SSDEEP

6144:SrAtoGnwqsTv+C0BtqeD51E5geIzCy8iVFyWtjhAf2kXPOKdMSyI/zrQ/0:ttvnwfq9fDbveIDlP9Cek/OKFzrQ/0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Vessel Information.exe

Files

Vessel Information.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 488KB - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ