blackhost[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

blackhost.exe
Size

7KB
MD5

c6c5330f8eaf060401f40c4cf169ddf0
SHA1

94917bae45de229d4098a4290a1a44dd3e2b9346
SHA256

0bf6cb95a212b9dcdbc6dc7d942504e27830219fc5fecac22cf7e59c9dfc9511
SHA512

8af8987672c52f13ce04e0e95177a5ce3facb84aada4729794e31b64c8f150e61691481f398fa9f23d967f183ed2ae6263d72aa3660ea94cd1a94ca26d96a4af
SSDEEP

96:FELv02ldvyJ9iJlT6bI+0nnnX0UY6cE27YlnlYJnLLPL0Kff180uZvRXmmqSSTfv:uLlldaLisI+8na/VunlYJLLLTtE9qLJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
blackhost.exe

Files

blackhost.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ