@Ysbigbossy3[.]exe | Triage

Sharing

General

Target

@Ysbigbossy3.exe
Size

6KB
MD5

d9a993dcf5d555bfe78229b2eebfb38a
SHA1

2bd83e967b4be9d4eeb603391fc2bd803b9d7dbd
SHA256

01706ac5d5d5c63e3bc48ad705dec9377acf50268aea0ea080e9e7daa3bc60f2
SHA512

0ed31da7a5cb83e2e1193dbc2028e910574d17bf35b71c74d43da501a3bbb05a1f7c61d0cdd2736422165d4155682d3de00068b36ea4f68af0cc741bf70edaf0
SSDEEP

96:w4qJQqSUQ1i+sbeofgowp4N6DWkqyUF7Q0takKxwr0ffs9ghT/bFnU:5qJSUQklfvwD+v7Q/kKVffsm1G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
@Ysbigbossy3.exe

Files

@Ysbigbossy3.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ