empyrean_protected[.]exe | Triage

Sharing

General

Target

empyrean_protected.exe
Size

186KB
MD5

b76ccc40aa405498d9c4f141fa2453ad
SHA1

e2f77551ba385162a2a443ff1ba8a9178b52890a
SHA256

7e558b723f73b5ed997e5579f531c6d4c0ecfac475e99d018a944c12f4445dcd
SHA512

c6c9260733d618fecfea15864b995548224370fccaaeffe79c378ef902e46f92ae0a61e194b86be92a667e6b6ede985bac260c73793a71543baa3ce5f03b32c4
SSDEEP

3072:IoCXBrP1Z9rUNj+PjvpyOVP5dVQ8KmbfRUqKQsJKp8F4l3YjmDrJVL5mtDlvBfaU:Il19rVjvIcXQuSQaal3Am5V0V3fXtFPx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
empyrean_protected.exe

Files

empyrean_protected.exe
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

".~R
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bXbbb
Size: 121KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�bAb�7
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE