Andromeda By @STRANGEMALWARE[.]exe | Triage

Sharing

General

Target

Andromeda By @STRANGEMALWARE.exe
Size

17.0MB
MD5

d19bf0e88eee53cd54800477fbe91963
SHA1

3f701c190c220d804eb5c7cbd39e74c3100c5774
SHA256

70bfdbe3723e37ba0797e936a5d8c17ff3df7da64a4a84e6ac2f5270c37db2db
SHA512

87975d5a36504a356fdb04f4bb8fe7e78344e886ca68de1c482a2d6424976fba60418d6e0457b5ca6efa7c4788d583a1f4f365152f70260946a39a6319ea2f2c
SSDEEP

196608:TTCyu67gyu67IT8weyu67/KgVKfBx8xoUTRzv69PE8e1kubTNCibTNEsCJK3XtXC:XFJmrZRKppqxL7yKNtCitEs+EjpG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Andromeda By @STRANGEMALWARE.exe

Files

Andromeda By @STRANGEMALWARE.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\cabec\Documents\Projetcs\Andromeda-Software-LTD\Andromeda-Software\obj\Debug\Andromeda.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16.9MB - Virtual size: 16.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ