executorrrrrr[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

executorrrrrr.exe
Size

11KB
MD5

038d8c03d3465d5d07126389f07edd19
SHA1

d7a90e84b193ab222b10aa70e17f1fbbf11e7e54
SHA256

fa4bd10cbd47bba6e782794e92297e5eb175856576c454e4cb090f4267c604c7
SHA512

c3eb68504b1315d3468a8dec5fa0611f721d874c6bef1c2ec6119418da255de570e77b2ec0f9c2de619581813bcae35ce70c1991ea1837a4994828fa800c034f
SSDEEP

192:ep+38JZhO+yuNYr/XS6k3erBXSOsOAVrPfUG:eSMZgGYra6k3erBXS4AVrfU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
executorrrrrr.exe

Files

executorrrrrr.exe
.exe windows:4 windows x64 arch:x64

Password: d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\benha\source\repos\executorrrrrr\executorrrrrr\obj\x64\Release\executorrrrrr.pdb

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ