Silviozas Premium Proxy[.]exe | Triage

Sharing

General

Target

Silviozas Premium Proxy.exe
Size

2.0MB
MD5

17c11665b8f2dfb8156b89a06b445802
SHA1

7e78b2c59f3bdb7f625aaf57d1b6d383a85fff1b
SHA256

3d9328ba22e7afde5ac34165c07dabf1f7d2c9ea2df2c80393248609b3842313
SHA512

89200ad7063db0ba7b677d2034bcefc9143acd8da0c8759a5400a7c08a60034014e8a2b10637edc1b73c79ce8f98c00978dc491b59dbc79d66cd04e7bd55e236
SSDEEP

49152:bYF2c018Cl7NzHXFcBuXIw89MFYHy2pHiin1rk6NMKr:bYF2cArNFU8IwFFYHy2pCit/Nxr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Silviozas Premium Proxy.exe

Files

Silviozas Premium Proxy.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

Size: - Virtual size: 6.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE