Solara[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Solara.exe
Size

357KB
MD5

c6b00ad78d1b7db6f9474502db6051a6
SHA1

5515a67818d2b2421d5ea51283faace8c4d7f530
SHA256

41e26eb267fcf3194f1036c30f021707a8e916bc480b5f1518d51ad7faf29ce0
SHA512

3f58fddcfe675326b81f65f9aa19ee481ea9e83ed58de8dcba04276956ec9c874b59ebcc06999d80261c950dcaa8b9ff84fafc84dace66a092a58dff4f1ec5d0
SSDEEP

6144:5uqr1XEbkS6ew80/0zW6SsZs80FDiRgvljRpeAhTQaS/sB5Z++rlGceseoIzt3N:cAS6eVWMsXiRMRpdUaSUPxr0cebZzt3N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Solara.exe

Files

Solara.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

|Fa'xdCV
Size: 316KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ