bypass[.]exe | Triage

Resubmissions

30/01/2023, 13:52

230130-q6m41saf46 3

Sharing

Copy URL Twitter E-mail

General

Target

bypass.exe
Size

483KB
MD5

eca3957d5d592d8fb9e897e85792827b
SHA1

aa51089c5c6ce72f94257f7974a2ff05c025337f
SHA256

de2864cb5c3f92f33bfa96d64d61c57bef23f6966d03a55857ec37c076a6b8a2
SHA512

e1021c173d011ae096219f6376ce228fb7327d44ab27966c1a6a3e3faa1de98b80609028ac4abd9f037c024bc74a64926bea140e45b5850ea50205b35166ffd5
SSDEEP

12288:k2Z82MhKRi5zIru6CFhCw9i2joMZ1S4y/Tilf:Ehoigu6Mzi2joFv/2lf

Score

N/A

Malware Config

Signatures

Files

bypass.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 411KB - Virtual size: 410KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ