Virtual[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Virtual.exe
Size

1.1MB
MD5

d8c7888965c95ef1a937718bd26dcf2c
SHA1

5da09f5fafe18e3fb5bde023c08e78fc3ccacc9b
SHA256

1826185ad8a10af75bdd063a03856d05cab11f2240bff6b72ef1d8b88b0daf5e
SHA512

2869199a5e3d7ceca7f834828a677cf8cea074eeb8232b0997e486dc35f75dffa680077d4824acd14b860da3f6ad0d24b2e25cc20c30e6c1ed347e22f53dbab2
SSDEEP

24576:fLnY0HdOnwzNHRnaaSOBZTH0t/2s9csMePAFo0amU1:fLjXRzZTUx2xsMePAFo8U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Virtual.exe

Files

Virtual.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

�o 6
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ