Vessel Information[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Vessel Information.exe
Size

432KB
MD5

e28059cae282a9b84624c26f939ba1dc
SHA1

e4c0522f48df86c1e2fd4d2e64351acf875c3a75
SHA256

721dd93abf33bd830abc78f030f6bb44d801adfe2950ee7820fd6f4ffb978373
SHA512

f508be70870502abdddfcf17b0b6ba62b3e1eb954d6a46a5fba8af4170bf5e43f4f8b0b28e324aaa3f775ed63727a2ae33a5c46dc9a0a547a6eff843dc3cb5d6
SSDEEP

6144:HGGQjEEoXW8SzpzfC0eUB3dVQe4Sf1BBQwIb84mB9kXjhoapcXDSJDRa4S2:mGQjEEMBSBfC0NB3fQR7b1YDnQ7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Vessel Information.exe

Files

Vessel Information.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 429KB - Virtual size: 429KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ