SeatbeltNet4AnyCPU[.]exe | Triage

Sharing

General

Target

SeatbeltNet4AnyCPU.exe
Size

164KB
MD5

7c49b670ea0db18e667841da6f4e45fc
SHA1

a6e78e0a61661b5df64e7e2cf022d0f9f93c7768
SHA256

11699956de3ce77c106e81b730f568184fec4ed4a5cc7d970ac93241b18ab4ea
SHA512

f0cd3e42ac386ce6f49f84a13ada1a36ed7f4ee0f7c094d62b42fadafcf720cc5b506c2c00a5d0a3b9ebb572c1885da930c83cf94f1ef3de4abecdf92e3dd504
SSDEEP

3072:TDYslLSk7Zzyw/WZMCuucYes+cIgRiv3xYugNJZ48tt9zrqmz1zp9UiFQMyeI5b4:ndek1ejMCuucY5+qR9Fb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SeatbeltNet4AnyCPU.exe

Files

SeatbeltNet4AnyCPU.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ