build[.]ex_ | Triage

Resubmissions

19/10/2023, 19:50

231019-ykjtgabb6y 7

30/08/2023, 22:18

230830-174hhaag9s 7

Sharing

Copy URL Twitter E-mail

General

Target

build.ex_
Size

244KB
MD5

4232eb22739895c293f99f6d8356edd1
SHA1

b7d7e61d0ff1e5b3c08714251739039983aa47bc
SHA256

9290aa71c6ae60c5d33edef1f577b4c05fc9ceec934bbffc1a5390085a16145c
SHA512

6c5b78be97686da0ae4d0720836ee95a798c311d9d9b85fadbdc3deb8869b8703b640312b853a752e6fe7f2618bf5925150c97dd6e12a54c0cce68a59f03b06c
SSDEEP

6144:gwchhDPBdr5G9pfFo39IPp38uoFW7G4Z:gwQdr5G9pfFouPd8LuD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
build.ex_

Files

build.ex_
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 241KB - Virtual size: 241KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ