VENOMPACKED_OBF[.]exe | Triage

Sharing

General

Target

VENOMPACKED_OBF.exe
Size

486KB
MD5

efde0a539e86e9b931635f8d28b38bd4
SHA1

1630cee4919166f795c7d2f61ef9a26fd0e870e4
SHA256

ad64049857fbcf458c46be6d1488b6ec65376910d77ecd912102673dc5edb748
SHA512

76a184315f26eb2ed428cdfe30bbbbdbd7318a4bb9d436dde4b4d456fbaa16aa4436dab0bf01bc67c697e8aab8d7c9b0bf96499a04f518bc31a8e2737b1369fe
SSDEEP

12288:If38f8RukKmLAlTqE4FEMUYYrjmU7EFy+qGGys/4s7btyHND8Dz5UYgBK:ihD+97EHVHRqDGh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VENOMPACKED_OBF.exe

Files

VENOMPACKED_OBF.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 483KB - Virtual size: 483KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ