WinTroyBuilder[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WinTroyBuilder.exe
Size

3.7MB
MD5

d3aa60053b154baf1e60928b9fce774b
SHA1

00ff4b961c760c365eb06de1cf7ec9bd017ef9cf
SHA256

89cc37a011efc076d5faf5094f3b4c712a5db80e3e4eb49e498999cf3836976e
SHA512

a2e15617826559ac9afd78d6c227234f5adae1140d09c5b5cefed711c5f5394d42a93054d7171dfd755d7e2c5f2e48ffaaddbe1bdff339b5199cfc53ab9a0566
SSDEEP

98304:hchwM4C69ZsDtROmv6qYKi0raitzdAfBEa0AiLAbbO0ugk:hNR9iDtYa6zL0eiZKEa0LAbb3ugk

Score

N/A

Malware Config

Signatures

Files

WinTroyBuilder.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ