Visuals[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Visuals.exe
Size

3.7MB
MD5

35880bcdf37e3c289e96e81885fd1d30
SHA1

a6f738c4790474de82295200f574d4619b380878
SHA256

38917b8fa6e7291d2cf9671c03da83a8444d8cd46da24f9617a6a9a537c44061
SHA512

752fb934a9080a8f43abf971f7a69a0217902a85f6a5a5ffcd4fa736e677745ddf7104d1ada30e024b613b84e29de5f60d60a8485eefb28389c9a020604e1d88
SSDEEP

98304:gwaUq+brDmg1F0L/HBayLUrrSm9Xpi5Dg3k:NjHSgP+AyLUrmsiaU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Visuals.exe

Files

Visuals.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\miniozoid\source\repos\Visuals\Visuals\obj\Release\Visuals.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ