GalaxiumYS[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

GalaxiumYS.exe
Size

6.6MB
MD5

95a8e0497de25fb3a95a6835595d606b
SHA1

9cd0058c571574be6b2658838d31347c6eb0ea10
SHA256

f3236bb46edd8cfd06301911b69a6919e9d181f6e9b373c7607cf6c45e0d7b33
SHA512

4fcd71c2ddeeafa491ee832628fad658bb364172741cef5cc925cb028029965ca66553412cea2a50e37df54b2049f3a2287d4902454b4daf587a85abf20ffbda
SSDEEP

49152:eCZ1TPpBzjDK0T9MM4qCcbViaOO0IGwH3Z1TPQBzj4r0T9M/JJJbjhXu:eePvKWbVyO0dWPJrXj0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
GalaxiumYS.exe

Files

GalaxiumYS.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\Documets\VisualStudio\GalaxiumYS\GalaxiumYS\obj\Release\GalaxiumYS.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ