Main ADM console[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Main ADM console.exe
Size

368KB
MD5

3270901cbebec71f0a27c65a0662fa3e
SHA1

7d337973d6b437a61c607169ed20801e847ea897
SHA256

996c0686f98fd75da056218c3eca7277558d63c08c4f6a505e78626d8ea41529
SHA512

cba4446171aa69e758fb45f72dacb51d6601d79f397dcf952cc8a6c7052721ee45cdb58272afb4bb573d090f519c8b4dc92b46f81020ab93056c88f77a86a568
SSDEEP

6144:RqzL5pukUnDpvx/ze6VlWT8b9/naUD/1bnV1zvXpfb7GupAl5:Ryqkw95bPVle89jbJV1zvph

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Main ADM console.exe

Files

Main ADM console.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 365KB - Virtual size: 364KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ