Exodus[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Exodus.exe
Size

633KB
MD5

7e91f2e112895c3cf3d6eefab59ddbfd
SHA1

80553d00e5936f6cf412dd3b5df82aee36cf34f6
SHA256

42eb2e88cedce77cfde9c9c6a42342cd11cdd73900950149fcfd253f81afe25e
SHA512

d4dba816e824ad5c7978f0bde9cd3ed730db0f39dc1f48d02cbe319c6ae3aeabc8e1d73f7a5adb66ca094b057af74c835b18aa4d1da21c23ac08ef36ea171270
SSDEEP

12288:PjktZF/UNDC83KxPj5rZSE5F6UnDaEdt1ny2b7jBOGjpjTdh3s4YuuCGRr7zp0y7:w/+Ml1ZSiF68

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Exodus.exe

Files

Exodus.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 630KB - Virtual size: 630KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ