Alfa-Sploit[.]exe | Triage

Sharing

General

Target

Alfa-Sploit.exe
Size

280KB
MD5

d6710e4f3685fb44ce4e828771fb46fc
SHA1

c79032953d021208174479d36a90822c2bbedf80
SHA256

fdb36189044de2656a1c8831da01deb862b8821c37bc1dd1c2bb96a7903d1f8f
SHA512

1851523b94e16e003b2aab6196017184c3f716c13c4db7fab4c0ca78d9b074724ff2d34f2cf53dc2be17440588cdbcd06689c1d1b90859527643ff0705272528
SSDEEP

6144:rkJ/94NnS7XVbzQkcrDOBLMXgRClfA8+xOtk33LNBT2:rkF94yZcrDOBLMWClo8+xOtk33LNBT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Alfa-Sploit.exe

Files

Alfa-Sploit.exe
.exe windows:4 windows x64 arch:x64

Password: k

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Alfa-Sploit.pdb

Sections

}O!*^W
Size: 226KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ