olduimatrix[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

olduimatrix.exe
Size

1.0MB
MD5

66658e3fa325e09a6f4d444fcdb0f62f
SHA1

e99807ab807382bbd186948947a83aabb3527f86
SHA256

09e084dad788d42508ed8ef49a62a949a4f89ba2678e42415c3808a95bd7fa55
SHA512

7fc89a3fb6ab89bf76ed02a71f800284d60a4a8f1542467ab949f5c8d4608d4844eb80ec4eb38c2b839c507b9333a8d55373ef825e0cff1232d9e84e77589f8d
SSDEEP

24576:WWPrtwQVbhgvLjUeJaFdyDLzkKTKTwFhciVKyz2pKeOz8WAzW0A:TPrt7gfLJaFcDLVewFhciQyz2pKeHWAV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
olduimatrix.exe

Files

olduimatrix.exe
.exe windows:6 windows x64 arch:x64

Password: aaa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

MTX0
Size: - Virtual size: 732KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

MTX1
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE