S0laraV3[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

S0laraV3.exe
Size

405KB
MD5

67e906207dc4b20a580322fce83efa77
SHA1

fb2a1c067590a65f56e1cbd23aecf75b320fa193
SHA256

990126712b6cbbcd50c2aa0a2e8bfdb8352b849b4ea83b0e376278737c3841ab
SHA512

74ca38900d2932b52bda10e5b26f80e7e98320b979b675d4f122e3c88ef458ba85ce1aaf5e9af77cfb4fb2e3b49e381225bce588ef51b1fddac5a62a94a3bb86
SSDEEP

12288:KY1WMeMI4SeVb5NG7vNIRLi5KigpPktXJDF7kfQXWEhA:KY7DrGxI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
S0laraV3.exe

Files

S0laraV3.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

K-B@&}{
Size: 324KB - Virtual size: 323KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ