Seatbelt[.]exe | Triage

Sharing

General

Target

Seatbelt.exe
Size

583KB
MD5

3e9358ddfe7b1113b065c1c8827ad6e4
SHA1

9d8a701195410b310a75c9bff38e3399cb9a74c2
SHA256

cb5a07900a7a01a7619e3391c0a2b59f81a8d8784c66698bb02263faef9311a1
SHA512

d542b292df17c1c706622bb6976c1bc3c9ab8dfaa4f50715c176f915c596b5714bb6233bad5f4c026d0a7d35d28fbafec8da71d153bde8c430f5151c9e56f3b7
SSDEEP

6144:9tWpOJI5fPBVux1kv9ifi2Oyc8UML9cxOKup5YbvanzHhRMK+BjE24sX8a4vyOKp:9wlPBVK1YUmoFpB+KiF4TK7G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Seatbelt.exe

Files

Seatbelt.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 580KB - Virtual size: 580KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ