MoarBytes[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MoarBytes.exe
Size

172KB
MD5

f342d3eee48436bdd3b7d66e5877c535
SHA1

02225782299b38be28aa40f098dc9a5b6d30a51e
SHA256

1afab4406cb1c057edcf2c407c71180573cb5a45165504c9cc44b3223bd5af26
SHA512

8833c7ef82f6c211aa15774566e4cd89567bc5dd5c9c20804d492349bc90f08ab77a5d2244728d842792f546349379d675ad3326ab47295272aaeeb6714573c3
SSDEEP

1536:IDhVoRva9SpL9JTC0MaL4mI5waeL5yxzoRva9SpL9JTC0MaL4mI5waeL5yxa6V6z:I2ZJW07hL5ycZJW07hL5yvV6MA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MoarBytes.exe

Files

MoarBytes.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ