HEUR-Backdoor[.]MSIL[.]Bladabindi[.]gen-1164dc6c14d[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HEUR-Backdoor.MSIL.Bladabindi.gen-1164dc6c14d.exe
Size

1.4MB
MD5

d1d34d4b2632b015feec87ff62cfe143
SHA1

19531f092784d7f52cf1df89d180f0e63ec43142
SHA256

1164dc6c14d548b7528a2441a822961d663f478520502fc06b3a0e12afa42111
SHA512

626a3d331b360028aa66e0ca0b2ff8185dacbb02e45d5d5f9bea6bf400cba02bbc00ddd6fe2daa77d103d25179b64235689085961968e1649abd12d6015c9dab
SSDEEP

24576:MAw9HGAUKXNphFY5tysivoyN1DHuMl36I9R+AdI/3:M/NSauMl3rTi

Score

N/A

Malware Config

Signatures

Files

HEUR-Backdoor.MSIL.Bladabindi.gen-1164dc6c14d.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ