ClassicVolumeMixer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ClassicVolumeMixer.exe
Size

10KB
MD5

532645729d6e5327b540c43b3139e524
SHA1

b5b3cba6f760ccd23e7cf1e81c33ba9a055e53a7
SHA256

e75de43c6dab6b6985cedd934c3e4e946db898980545a3f4ea33e587f18a3e0c
SHA512

a2254693f6a217b849c68bd2897740e2a91cf4cffc8cbbefc85f71fb54175249e4ee6acbc1f40e6642c966df8e5c8c1eccecdb27e6b213c46219181817405055
SSDEEP

192:dGKlZZufgTb89eIb+coB5aiicb4ZZkNH/9mqq9fmoVOBR4yhp3:AK9ufgTb8RbyaiixCXafu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ClassicVolumeMixer.exe

Files

ClassicVolumeMixer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Patrik\Desktop\Classic-Volume-Mixer\ClassicVolumeMixer\obj\Release\ClassicVolumeMixer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ