fish_bot_3[.]10[.]exe | Triage

Sharing

General

Target

fish_bot_3.10.exe
Size

745KB
MD5

396b6df760f419be356a5ac29681fca4
SHA1

89a6750e8d05dcdf8e3f5caec7fbfacefab6ab9d
SHA256

9280379b3cc9860d709b02cd16b36542861f9e781517ae930adb4072f2e6dcb1
SHA512

0bce6c0848db4ccdbe2e3868a41aff18b7d594db343508d41130be1260bc746379112322220ede23b721440f851d9f04962442500362b88143b40be96f19bbe8
SSDEEP

12288:eC8E9mvGes30DZdfrXg+JwuKt/S/60pFx8nRbxMxkjo5Bda7ED9jrVWb:Ztoues30Dfw+Jwz/S/688nVWKk5BkAR2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fish_bot_3.10.exe

Files

fish_bot_3.10.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 726KB - Virtual size: 725KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ