Crowbar[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Crowbar.exe
Size

3.9MB
MD5

d1af61560f006a76142f3d1b87d9dcf7
SHA1

6205b55208c36210df3ccda28a0ed38a8e23cd66
SHA256

7fe317aeceedb48d22580fad3573b3e18d50ae32b5f6530e1666af3bc3d02904
SHA512

6089e83c01edea91c9f681ab74d1c790e287acf5d1accef5e8ef2bf2e8fa2e8c2ecd0920795160f49d28af038048a1cfbe57b30e37da2124842b4800067624ee
SSDEEP

49152:mkyYO/dm9wl9W5TUBJ55rfAocpl1LVC8aoLCtQrnGmcFxs/0JhxCNU:mkwswmNA5Kb1LY5fs/6

Score

1^/10

Malware Config

Signatures

Files

Crowbar.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ