Mercury - _ -[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Mercury - _ -.exe
Size

1.4MB
MD5

85013f1e181360e4a7f9b4f7aa9070e8
SHA1

03b665ad3cead98e2a444c289fe419915a1cae57
SHA256

c3e56a29902e31fa50d1d362502f57c85606d17168bb8b9020ad0e722d2040e7
SHA512

7420692e5d2e093467d4e598e19efa4a488c5a0ab051169658afc3d94591f59b4b11a503e499ef970884c34f719e3897803f3c3dce7bc339c4197a246017c8c4
SSDEEP

24576:nb8drE24Q0HFYWxU2vvP5lkn6F1jaOixBlbsFmpa72MniH:nb8dX4xlYWrvTkaFixUFmp+2M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Mercury - _ -.exe

Files

Mercury - _ -.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

jHGGLTGc
Size: 512B - Virtual size: 22B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.????
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ