Revised[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Revised.exe
Size

8.4MB
MD5

dca34beab0c7b52600fc590c598fc913
SHA1

e4f143d634848fb0da0a55c6a24d5c5bbd9cf3f2
SHA256

5f64bb1fef13b53d8155e566e7d45cbc262cd6905d6147b9c9d5bea1e3fcbc7a
SHA512

36ba4c8d716ca8a5a5f8340fb3156dd35888535a1fa699e1756858ddf1ca841aee02621c74193a62139eb9d15e97db22c02ad5d1b2d65e7cd672214cf241547f
SSDEEP

196608:A3CkGgUgSx8NRS/Oku/NDNqCsbTyivoiu333YmOZdgkSI:A3CkGMNs2uCaXvoiu3TmgkS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Revised.exe

Files

Revised.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.SKIRRAP
Size: - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.SKIRRAP
Size: 8.4MB - Virtual size: 8.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ