Aetheris[.]exe | Triage™

General

Target
Aetheris.exe
Size 546KB
Sample260707-3msavaf131
SHA256 27bad89f7a2ddde7b0a7feac95bd7978c6622fbfaf10551bb2d7dbd6396140ba
MD5 972caddfaca7a8623c5f1a0ec31981aa
SHA1 6470f190e67cbaf7ff9365956f556ae959e031b5
SHA512 7f4dd91caa3be741f115494e35b95420a5ab059b537e1d963f43f7d4ce5ac874c3a1c6a4611376e9d73ba2e0af8a17db6a61d36b4ab3aa8235b874ec5315de72
SSDEEP 12288:+xsjhKmxVhkbWyjsYKeUACB//Ib5Xrxn7R34TXAXZNIQHDEb2kdX6K:+ijYm/hkbW+yAQ//KrF7RQ0Z
TLSH
T107C4BF9C766072EFC857C472DE982CB8FB60747B871B4213A02715AEAA4D987DF141F2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

ConfuserEx .NET packer 1 IoCs

Detects ConfuserEx .NET packer.

resource	yara_rule
sample	ConfuserEx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Aetheris.exe

File Explorer

Aetheris.exe

.exe 546KB

Aetheris.exe

SHA256 27bad89f7a2ddde7b0a7feac95bd7978c6622fbfaf10551bb2d7dbd6396140ba
MD5 972caddfaca7a8623c5f1a0ec31981aa
SHA1 6470f190e67cbaf7ff9365956f556ae959e031b5
SHA512 7f4dd91caa3be741f115494e35b95420a5ab059b537e1d963f43f7d4ce5ac874c3a1c6a4611376e9d73ba2e0af8a17db6a61d36b4ab3aa8235b874ec5315de72
SSDEEP 12288:+xsjhKmxVhkbWyjsYKeUACB//Ib5Xrxn7R34TXAXZNIQHDEb2kdX6K:+ijYm/hkbW+yAQ//KrF7RQ0Z
TLSH
T107C4BF9C766072EFC857C472DE982CB8FB60747B871B4213A02715AEAA4D987DF141F2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

ConfuserEx .NET packer

Detects ConfuserEx .NET packer.
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

Aetheris.exe

generic