MaddStress[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MaddStress.exe
Size

294KB
MD5

acd99287b8b4b7fffe593bb90a2496f5
SHA1

16c63c1f1cddec362355c7657aa3b7b8817f5972
SHA256

07d774984471629b80bd093794d3de79e0b26c2ac81765e56b8b9fc4ec76d532
SHA512

0c561d4f8d62c0502ea0177b9c621129a4fb056a14de0d9fca0526389ed46259dc5aa400fa9172f26df8428107005ee507dd0a683f60c0fddc87e1714826057f
SSDEEP

3072:ina50wvLAA2Hd2/U98uCarsim/ttmOq3UpKx7mdSSQJDd8ZmnmNQPrY/gAFB3cF1:PAiXQNd8cmbwpkni5Hq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MaddStress.exe

Files

MaddStress.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\user\Downloads\Compressed\MaddStress-master\MaddStress-master\MaddStress\obj\Debug\MaddStress.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 258KB - Virtual size: 258KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ