Spy MAX[.]exe | Triage

Resubmissions

09/07/2024, 11:59

240709-n5pkcashmq 3

29/06/2024, 11:08

240629-m8l3yswelh 3

Sharing

Copy URL Twitter E-mail

General

Target

Spy MAX.exe
Size

530KB
MD5

2d00b1f7d3b15637cc0ae2be68fb872a
SHA1

f42f12cff9cc7634fdc65284b040d94cc128f3e2
SHA256

afbc0414c3778e84d0a23d3a1e934b00fabde4390804702a212c1f1018fffbcf
SHA512

1d4b180cf858691679f264cc229fd07b07cd69ce609d1e2c9ffd59f2ce591c25b127d58d9a464c815f5fe4c1aadecdcedde2bf86dc6ebe5960c4725db11594bd
SSDEEP

12288:VG4MCrtpiIVZpiIV+8hyQLTZAlgrd+Cpkuodt4mnCzeq9ysmiIE:VrpiIfpiIsomCCq9yMIE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Spy MAX.exe

Files

Spy MAX.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\GAMER\Desktop\AngelAndroid\AngelAndroid\obj\Release\Spy MAX.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 497KB - Virtual size: 496KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ