silence[.]exe | Triage

Sharing

General

Target

silence.exe
Size

2.9MB
MD5

b5ea0ac589dc5d6e2ba4238d5ee33f29
SHA1

a1b0fd11c377eb7b6c4d4a9c9a93ab787299505b
SHA256

2b0cc5064e5287b8ef3320016f2dc61d413bef95ccaa686144c0d93245eb8f31
SHA512

517bb8ca2e10d45fe78be5ad8b1a493af9e41d3f3fe3a3285b9ac50e0a517267a49007aa1514e98458bf026820581121c453c938faacea57aa7469c158570eb5
SSDEEP

49152:S64gtSfI5Kz52IkAiffSwmzpGJJf1nklneC6Y4W+DXYEyOq3834X0IxHIW0yQXZb:SbggfI+52InwmzuklneC63W+DoVp38I2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
silence.exe

Files

silence.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.SH00
Size: - Virtual size: 1.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SH01
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SH02
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE