stoverlauncher[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

stoverlauncher.exe
Size

373KB
MD5

e91ce3ea8af39346ba3d9bdd26312d64
SHA1

e7dddf48c3fb11d7ae4f45a617b4ac7a02c52a8b
SHA256

4478aaeeca08126becaefb6f555169eaa07905598cbe629385959ff47ee710f2
SHA512

a49d6adf72ee6cc919c290eedad9cbc094ba2b5b9c5a84df8b53ddfb0e2f4e9221417e53c41d0c8b876c7a52c9853d2f1fa7a5dc4ba47b90ba1e6d6b4537b741
SSDEEP

6144:DWNzoIqIg38Lgb9P8Tnmw/pEXUe+Ep6Cge+LZPR6MX5tIb6kIX3TW/xcYEKWbCf:6NcIfgb9P8KwhEX9hpN06UXIbZIXK/xZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
stoverlauncher.exe

Files

stoverlauncher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

o"
Size: 329KB - Virtual size: 329KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ