Vegasploit Setup[.]exe | Triage

Sharing

General

Target

Vegasploit Setup.exe
Size

243KB
MD5

6d01a07067c2d36a970de22135ee4070
SHA1

0e0594aa1b4058027a42515d2eb2d03821d82922
SHA256

2e997e94336132204e69060796adaf29f202ddee6258b33b410292953cbd39f6
SHA512

fe67b01a81a45df36b859f8a17d042c803476ee97ccd6184524f1ff6bb38541c946d319abb5435c1acf9b45a3f37c828a272e452883bbdc119d5051da132cfe9
SSDEEP

1536:sj9QW5ilJV0gMJyLfD+Gx+eOW5ilJV0gMJyLcD7Gx+Ir:sj9XinV0gMJ2bZzinV0gMJ246z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Vegasploit Setup.exe

Files

Vegasploit Setup.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\minec\source\repos\Vegasploit Bootstrapper\obj\Debug\Vegasploit Bootstrapper.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ