Black[.]exe | Triage

Sharing

General

Target

Black.exe
Size

341KB
MD5

55e9b1518973a808c7b567fe3ad52153
SHA1

71466e12ae1ebac959d9f7e25a29b227aed3d444
SHA256

0320a774ff045d356ee357b719e29ff6d1b55fca6f0c1084250f696f7190fb7b
SHA512

463b1566ec732afdfd50b1a226f0b879c5673a5a4e2452631fa838980b0a7fd74a82681982c937495499bac6cfc55baca57b27c2542760e4a27ce6a636321713
SSDEEP

6144:BqJ6/qj72fHP4hox9uWwLYcwbavN1auTi:BqUq+X4wcwbaE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Black.exe

Files

Black.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 301KB - Virtual size: 301KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ