TrinityV2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TrinityV2.exe
Size

516KB
MD5

6fe23cdd083c00fd85024379f62f18ee
SHA1

33e78994a5a335a180d4046d75f090a3c6314b79
SHA256

204d558fe4d9c9beee21bde600d75e13a3e50afece09708ec60d07dfcdfd07d7
SHA512

8425fdd3f12e64f265626da28f4943c4748f662e41acb3a36634b5a94388f4884cd71b5bb8e4bcfa17c75008f3ece6abca7c37cca3a0cad1d46cd957066c65c2
SSDEEP

1536:2MBfmwR0VzRDWcQjK1/41D0je0VzRDWcQjK1/41D0jrCtVcl:WrDFJ41D0jVrDFJ41D0jrC/Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TrinityV2.exe

Files

TrinityV2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\stake\Desktop\TrinityV2\TrinityV2\obj\Release\TrinityV2.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 263KB - Virtual size: 263KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 251KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ