ASM[.]Guard[.]2[.]9[.]4(1)[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ASM.Guard.2.9.4(1).exe
Size

3.9MB
MD5

96162c4d8f269617409642f3cac1ff63
SHA1

01ac87e497dd5f47aef346a1968560402e6fc0ea
SHA256

4a41b9ae527604f56289c1d659b50aeed34e6b2378e2accdfdbfdc5db870676b
SHA512

bad05e8dd040c1b2c77949c4574f1f8447a7a15f70e7d639297c3b86f719a3f5c8afb82b79b49c7278629afbe852ee2af840e4cc43311d48bb0627e2fff5572d
SSDEEP

98304:JGmGar9ASN9C7ni7ytjSduFWe5+Vvdo/Wj13Zu:JGmp1Nse7ytGz+Ot

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ASM.Guard.2.9.4(1).exe

Files

ASM.Guard.2.9.4(1).exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Y]
Size: - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Sr
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

._o
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ