Azrah External[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Azrah External.exe
Size

81KB
MD5

f5e32b8f4c59106b1e4fe62dd93463d5
SHA1

37d4827dd47e912d20f179d0b4c8bf483ff974ff
SHA256

86f98ec56e98702f81b0ebb3d437e0fae04860221ce71d48cb2c78e0f041c149
SHA512

50e4f2f40bc08cd35de97effcda41cd7a1108999e5beb253ebd0fd7b9f1f68bb0405d981d0688fc754b0a1ce36f46f081fca34303ed611ca6a976bb1d293b58e
SSDEEP

1536:KUJKUZ4Gp1fn9c4aRnyDxwjhmCjkOj7NN29QAlcoA1gjr/EElp+X:JtZrf9c4aRnY6mAHWS1gjr/Eu+X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Azrah External.exe

Files

Azrah External.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\cinex\Desktop\csgo\obj\Release\Azrah External.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ