EXMain[.]exe | Triage

Resubmissions

14/09/2024, 20:43

240914-zhyqaavepr 7

14/09/2024, 20:42

240914-zg9q6avelq 7

Sharing

Copy URL Twitter E-mail

General

Target

EXMain.exe
Size

87.4MB
MD5

85189b63c875adb27adcfcf688300c66
SHA1

4bae3dc53564a8a2423cbbcaa649decd67fceb54
SHA256

d3bb46991e66d8759f34036bb8e806f39d57b689734a6b08e80587fa09277c5b
SHA512

8ae1b1742b39a111b1017e200503dd4cb98a94f364fb3e9672968b5dba6bd83e54658d9a82d14353fd94a2b4d151b0f9e11098a3667f101811fc1bb34c08f355
SSDEEP

1572864:cIMqqbE1Vrxq+xqAQTJOQqLdnB2gGKKDy2GBQ7oonKdwx:cIMqq41fqfvdO1nMgtu05d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EXMain.exe

Files

EXMain.exe
.exe windows:4 windows x86 arch:x86

a9c887a4f18a3fede2cc29ceea138ed3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

malloc
memset
strcmp
strcpy
getenv
sprintf
fopen
fwrite
fclose
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit

shell32

ShellExecuteA

kernel32

SetUnhandledExceptionFilter

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 87.4MB - Virtual size: 87.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ