Drácula[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Drácula.exe
Size

1.2MB
MD5

e18a85038d77fa62c376f717bf2d7a24
SHA1

e881dcce61dfe7f240f94fb0ca2013c11f83403e
SHA256

fa93125438ffb8840e9d7dee4ebb672aa761046036a69032c4350384081d9880
SHA512

4ff1367eb5501e4a0b4d9ee96d8381acf6dd9a4b798d034dc71b7d02d6d869cf2319c164accc740648d278d520b671f01161109bd173b309059a0f1f5613e33f
SSDEEP

12288:IVMFsSVqjy0FsCuu36Wq4aaE6KwyF5L0Y2D1PqLYTaeicV1qqLj3zxwXvTFsCuu:MQsSVqxpthEVaPqLYTaeicV1qqzgvR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Drácula.exe

Files

Drácula.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\ScottFit\Desktop\Drácula\Drácula\obj\Debug\Drácula.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1013KB - Virtual size: 1012KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 209KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ