EtherCrosshair[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

EtherCrosshair.exe
Size

815KB
MD5

a029709ce8479235d8918f058c11ae70
SHA1

61f202e1b7ac600667e4e071eac5665a99f233ff
SHA256

22142558a8666401c7117eb7784f03a65566d13e8fc642a3e2a908697974dbdb
SHA512

ef1136e0ea22ae3136eb2e8b40bc491322f6f52ac4c675740bd7b2c84065d3425b7e48a7123eb4b99abffe9e7a2f6871defbb510dd275f68917363281b8afddc
SSDEEP

1536:0s9o3E1wn6bmHKpMoKtn6bmHKpMoKNn6bmHKpMoKG:0sje6bmv/6bmv36bmvo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EtherCrosshair.exe

Files

EtherCrosshair.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\adamp\source\repos\EtherCrosshair\EtherCrosshair\obj\Release\EtherCrosshair.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 548KB - Virtual size: 547KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ