Umbrella[.]exe | Triage

Sharing

General

Target

Umbrella.exe
Size

269KB
MD5

e6006d08e5d448222987430d8ee1dfb9
SHA1

a065eed98c3ddd099e79b314ef79236fa623fd53
SHA256

7ff6a48fd75d3dd5b60a6be54308aad992693666140af544bd1a6c339688ffcd
SHA512

9d7152ba5f42d0ab8a5dd0147ed7ebe15a5fdddb6398912fc4b184651901d6fd8183f56079b12a5d2d678fd75dabef1b842df3f8c51054eefd33e4e868c0417b
SSDEEP

6144:6RdQCYyJafe6VlWT8b9kze+RIdrob3ZhXhd:6TYyWPVle8/Do7xd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Umbrella.exe

Files

Umbrella.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ