sphere[.]exe | Triage

Sharing

General

Target

sphere.exe
Size

27KB
MD5

59d6c73d52bc2718bd49ef11d09f7ad7
SHA1

e232ebd99387344240c17eb7869a96e4a72f6be6
SHA256

f98f5fa139cccb9ef1344f4071f2add345cd8cbae74e52e511c8f5ffff2cb406
SHA512

092a696e36c1be96eae20673e40888b13c7bd66607ad43c7ebe0b7de8f7f2dbb95a63292aae129f19ce959bedab7ad6dcefe4df0450f5590f31cc29b7eefdff8
SSDEEP

768:bhHm66cSTov9ClF1SoUUI0uUPyOQ/Ebzf:bhHm66cSMv9ClF1VUUI0uUPRQ/Eff

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sphere.exe

Files

sphere.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Admin\source\repos\sphere\sphere\obj\Debug\sphere.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ