Triggerbot[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Triggerbot.exe
Size

1.1MB
MD5

7ab529149ce4441842ce5075ae5f55e5
SHA1

6d7e69c15cedeeaae6bfb8bda76e0f8271e71b0d
SHA256

925e37b498d5c3f555bb6915408edf2d278322b0e0bd982bd8dc509874b0e9fa
SHA512

c452842563e0e76c227e64ff36a1cf02bec2e492149dc21c46a57102bb31bdf08bc28f05719c79b727697122aae02c5320d4e6df41ceac6f4c3e7c4ed694a5e1
SSDEEP

24576:hSGJ4sf7nsVS1CGJ4sfas5J/dLSzmSdXIHl1Zb/979PABOP:AcNsVSgckMJ/MzV47Zb/9BPAB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Triggerbot.exe

Files

Triggerbot.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ