UnamDownloader[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

UnamDownloader.exe
Size

9.4MB
MD5

d506f597b337bb21d0be9638873e1cae
SHA1

cf43f7ebe1e2bfeada1d04edee631cfc05eaf9bf
SHA256

729ef000683d0903141c1031fb3eeed340a4635a3f0b489d0df396d5065a36e0
SHA512

fc833c5a7fce6b577336948e9ddaceac41a4543311de50d79d7edd00bc318c1eba4ad5951fcccd26cfc0fa990ab81a30178d4b2a2968f4a7960a6b73cea2d353
SSDEEP

196608:Y81oBGyk1BK5Gf01Up2GRlRaNqg4eS+wDjxx1ohqsIOGvuQdaQ:Y46GykqGf5sGRT2qFP+GDAqkG2i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UnamDownloader.exe

Files

UnamDownloader.exe
.exe windows:4 windows x86 arch:x86

Password: 5ez

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Sysadmin\source\repos\UnamDownloader\UnamDownloader\obj\Release\UnamDownloader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9.3MB - Virtual size: 9.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ