blackhost[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

blackhost.exe
Size

22KB
MD5

28a3ad3ec6c0247e8f6457acf5e73192
SHA1

0cf266978fa60cde320e361a7fc82930d243e53e
SHA256

38c2226e46351eeb07ba6b130b4666f445aa040f5293ac6437d32f4d6857a70a
SHA512

982cc1619276a51c055162d9cbe6f2302791c760a67f7d6cecd18e48ce043dafd4d127f96febee666062f275216473c5fdb01fb3aa60ec8da56e099b414f8754
SSDEEP

384:3L3R3W20jrqq1daLia3hPLTu2b21sICJbt5j8KoQrJKmD1:7BGdmp5I2CRmx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
blackhost.exe

Files

blackhost.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ