Silent[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Silent.exe
Size

874KB
MD5

3b45469354da7a794775bd34f82c3698
SHA1

5019dbd10531ee48e718ff35b4d5d6b1e1f58029
SHA256

3e3ae8180c5d7faf79758df3f42dc1b042799fa396523cf194a81cf0e750602d
SHA512

d85dc4ef4fd79240d95197cff219a5502d344886bafc6f835dbe4d69c56b860b798245a2a198920a2e58bbe0d7b1ab0bc31fee56db180015d8992fbe613bf702
SSDEEP

24576:AUCJl39wh48rFTGVNLIALKnFkH9QQmPl7n9EDxH2:AUCJl3+48JmUJnoBil79mxW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Silent.exe

Files

Silent.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

PASDC
Size: - Virtual size: 5.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DFAFC
Size: 870KB - Virtual size: 872KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE