emulator[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
emulator.exe
Size 11.7MB
Sample260620-2834ssa15s
SHA256 6f72420a66778c5a1edf5d8d60e18bb801eb7f809fbc840598b2aa7c467fd1ff
MD5 d5ea8277e9039b89fe10be3a48ac07a4
SHA1 72ce0830529009a5dea3abcd66c8831c31a998cc
SHA512 9118dbe22eae0c075c61fa8caf28a6fdd279eada40731807db34905effaa768d9e989712dae43c4928c67eae16c69c053666a710f6296057c2dcd41539dda94c
SSDEEP 196608:NDa0UJYCXrbiwav3kLElG7nRUiJ9qoO2zR7NZ47tZdfRCNL9o:N+0ONXrbKkLEInJuoXmh35UK
TLSH
T1F0C633C5059EBD92F76172BA3732C53F0E3D76E46A8A842CB61B8514451930FCFAA3C9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
emulator.exe

File Explorer

emulator.exe

.exe 11.7MB

emulator.exe

SHA256 6f72420a66778c5a1edf5d8d60e18bb801eb7f809fbc840598b2aa7c467fd1ff
MD5 d5ea8277e9039b89fe10be3a48ac07a4
SHA1 72ce0830529009a5dea3abcd66c8831c31a998cc
SHA512 9118dbe22eae0c075c61fa8caf28a6fdd279eada40731807db34905effaa768d9e989712dae43c4928c67eae16c69c053666a710f6296057c2dcd41539dda94c
SSDEEP 196608:NDa0UJYCXrbiwav3kLElG7nRUiJ9qoO2zR7NZ47tZdfRCNL9o:N+0ONXrbKkLEInJuoXmh35UK
TLSH
T1F0C633C5059EBD92F76172BA3732C53F0E3D76E46A8A842CB61B8514451930FCFAA3C9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20541528

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

DIVINE.pdb

Name

Size

5.3MB

Virtual Size

9.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

556KB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

1.3MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

107KB

Virtual Size

185KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

35KB

Virtual Size

121KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

33KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.debug

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tmd

Size

Virtual Size

6.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.boot

Size

4.3MB

Virtual Size

4.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

16B

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

emulator.exe

generic