morphine-unpacked[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

morphine-unpacked.exe
Size

238KB
MD5

12204bff81ac58cad6e35fade023dde1
SHA1

716282b2e9907ca6504adba9727d3f95b06c2c66
SHA256

1f582fc90f411d9cf1e923f034b5283b0c9d236754d2110210ce03b1b416ffba
SHA512

ac6a7b54f8bb396022eb813fb4a20e875701afcbbf58b6076d3fbc84d73cc9ddc5f4e5060b4ce0ac0905c2d54b20a363e4a6902c2253177b9ddf3d28e319da21
SSDEEP

6144:GbQ0VTQIfAIGOkGacaL/r2x0193GfetmDSXqeeVwZpK:GbQomGacaL/I01930ethaee8pK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
morphine-unpacked.exe

Files

morphine-unpacked.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 236KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ