Exodus[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Exodus.exe
Size

54.6MB
MD5

30f2bab2f8d6204079ed25fd5a818004
SHA1

bf40103ffc2310f1c7d7e215bc69efb0f236de9e
SHA256

b69140958fcb37afc30e552e584375a8a8bafb2a6ca65370d47e2adf0495490a
SHA512

0464c6cfdf0b56ffac965da59a41a615dd317789088972ccdb6277a72bb0cfe9a29e29e9c8b6e15a98d4d0c0a217f54d352b85c173635168fc4b3ac4d078f303
SSDEEP

1572864:p2ZmGmS+j90MsM91L0ktsfvp0XSy5y2DCPb:p2Zmbju96p6p0XSy5DU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Exodus.exe

Files

Exodus.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 54.3MB - Virtual size: 54.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 354KB - Virtual size: 354KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ