athena[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
athena.exe
Size 73.0MB
Sample261018-3yetwsvs4k
SHA256 38de7f31255ecbe51fa04a26bc781108c3a62ef01e44fd63e702414c4cce1834
MD5 c7de2ac846a37c7bedb5673a58f9ac55
SHA1 07aaddf057e2fa9546bf2da162a072734d23d08f
SHA512 4de1d7336fe26a056b2acd3452861d5ecf170d411872396b1efd5dbe731d531b8af30b947badc99add2d32c818c5471684d0ada50794697ee3074e47a07d7a4c
SSDEEP 393216:sAopeznzWnMbR6/v2y0JaUiOAsJbgdh+Uns:stIznzHbu+pd1gL+U
TLSH
T15DF74A83FA662CE0E5ADC134C57685237B313CB9972023D76B54BA242F2F7D029BA754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
athena.exe

File Explorer

athena.exe

.exe 73.0MB

athena.exe

IMPHASH fded4768f310c3387d552ea4846492b1
SHA256 38de7f31255ecbe51fa04a26bc781108c3a62ef01e44fd63e702414c4cce1834
MD5 c7de2ac846a37c7bedb5673a58f9ac55
SHA1 07aaddf057e2fa9546bf2da162a072734d23d08f
SHA512 4de1d7336fe26a056b2acd3452861d5ecf170d411872396b1efd5dbe731d531b8af30b947badc99add2d32c818c5471684d0ada50794697ee3074e47a07d7a4c
SSDEEP 393216:sAopeznzWnMbR6/v2y0JaUiOAsJbgdh+Uns:stIznzHbu+pd1gL+U
TLSH
T15DF74A83FA662CE0E5ADC134C57685237B313CB9972023D76B54BA242F2F7D029BA754
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

616448

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

28.0MB

Virtual Size

28.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

41.1MB

Virtual Size

41.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2.1MB

Virtual Size

34.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

588KB

Virtual Size

587KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

athena.exe

kernel32

generic