Apocalypse[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Apocalypse.exe
Size

379KB
MD5

6831f592cd974e550f295abe5ec850de
SHA1

5f2cd4a8d701139553901cccdf6cd0f5122629b0
SHA256

093ae9f6f787f1fe071ae1c9d9e61fb37a2d7ff93e7d32e949bcce53eca50c15
SHA512

de8f12ce7e5729ee127d8a3351801bfc67a3f256d7d45d0fe6f89d3eff329f963980d4bbb98c45e9fa0fd4508f73b2edef985b533dc563b8b69397bfeb452926
SSDEEP

6144:2U0FijNhOO2/aWd6jSDH6HXynywyWUBdx1dIqXPn9A38UuzPKMabcZrfVDwEzGid:YFijD2/JDHNkBNXPnS8UuzcIZxkNpU/4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Apocalypse.exe

Files

Apocalypse.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

MSG.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 377KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ