AstroAPI[.]exe | Triage

Sharing

General

Target

AstroAPI.exe
Size

728KB
MD5

39647ae3ad9db88e76736352c4d0df55
SHA1

2e6dd784adc13ac8b162ad92de38ab4db15f4c58
SHA256

13c6f903a450feadb46c290e85209be08be593e6944793359e491de15d2d14fc
SHA512

e67bc1947b6ab67b8e0bdc9abc40b3a01b1bbd00ed5b467503d299e7e4a73a1f5a4cd83b092fabd3b2e32f59caf2aa0722824c67cd932eab9a8a66ed435c9461
SSDEEP

6144:pF7vZe3amb1ORTToE8jveWcoJhPLekc4hkb1GozkIVkuW:pVcqmORTToE8jveWcoJ4P401G1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AstroAPI.exe

Files

AstroAPI.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 726KB - Virtual size: 725KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ