Monoxide-harmless-V2-x86[.]exe | Triage

Sharing

General

Target

Monoxide-harmless-V2-x86.exe
Size

3.4MB
MD5

06d4acf495d51f4f8ada5c5c25dcd222
SHA1

0bd30d1dde343f601e72e77f54fb21c00f9e8967
SHA256

d3c0a2e7b868a662585443653c0bc3b1e2a4b40f92c269979f79fe6622939c13
SHA512

30c5a0b8bc227f5c7e9a27c1a2e61766aa63b15fda7366ff94fbf8f4cd0d7678c1b409a6fc66cb4a98f7e4ddf6ed77630787b99e969307c2933a2063a89813b6
SSDEEP

98304:gN2rsRqpXtKBmEIUCitiKUeYTcfG3RCdK1xO/xpT:gN2rAqp1pUpbMIdKDO/3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Monoxide-harmless-V2-x86.exe

Files

Monoxide-harmless-V2-x86.exe
.exe windows:4 windows x86 arch:x86

a9c887a4f18a3fede2cc29ceea138ed3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

malloc
memset
strcmp
strcpy
getenv
sprintf
fopen
fwrite
fclose
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit

shell32

ShellExecuteA

kernel32

SetUnhandledExceptionFilter

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ