Symbaloo[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Symbaloo.exe
Size

68KB
MD5

3e85239d516bbc1a2049fe1a80ab6971
SHA1

06cd7b551740078dd918d4ddbc70b857e52bd0a0
SHA256

ab8ad64a919916cf1575967f1e06bb7da4b4c38a82875c5e21e023734bac135a
SHA512

afe27b54a8282a974b41d956612df8012beb081595e9067d22ab7dd1b40a4011611a993c2a722827343b77a2f6cba2faffba9847acdcb0f8e80e35016a42716b
SSDEEP

1536:MwJNmZig5gkHTRVSDdvvIt4hQL1E1UrvQg6OsxMtP+G/Bza:nfmgLuR8aChQxE1UWOfBza

Score

1^/10

Malware Config

Signatures

Files

Symbaloo.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ