Devoarmy[.]exe | Triage

Sharing

General

Target

Devoarmy.exe
Size

77KB
MD5

6bd4b2dd8dd52251e1ffcbb6a8101875
SHA1

04075dce494a7eaee97df11bbf4a429c9aec7e69
SHA256

5390974f82d7637e2131afe202866eff9cf5f14377636d9f5fb3d29c54093763
SHA512

51061ea462deb93b3b5f2164e446d1eecda6728fac7eb67b91af77da9e84170ddbdd2b707f6cf3b466e46f05506b15efb0a15ecac47068a7016a3917d4dada9b
SSDEEP

1536:ESmiUNs6qJrJgEkuUoGaOAR0Erg8aWc3buY2GGvOrOxT/uOwG6GtN0C:EidrJgEkqGaNST3bz2zJGOdP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Devoarmy.exe

Files

Devoarmy.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ