Extract 12-Word Secret Recovery Phrase[.]exe | Triage

Sharing

General

Target

Extract 12-Word Secret Recovery Phrase.exe
Size

77KB
MD5

7a896c376311f1a204951a064129c408
SHA1

4ab5dd35e9c4833c041f84d9297cd7caa65a3b12
SHA256

5e5fcad43955d5f0fd709e13ca65f76f81a37f091f45914038c0418e9192a3cb
SHA512

5c14f6857f07954777819b0e9fc308c84ea1c7f557b96826bb5311ce902f9739d8e4505f761ae111bfca386eece6d30a281fd6bd9f6a3649744d165579e0e847
SSDEEP

1536:3hEn6eVc7mDDT/rEeOS5A3JaX4S1pFSbLNAlK50AicC6Fi:xEn6eqm37r7O53JaXH4fNAA3k0i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Extract 12-Word Secret Recovery Phrase.exe

Files

Extract 12-Word Secret Recovery Phrase.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ