360bowser[.]exe | Triage

Sharing

General

Target

360bowser.exe
Size

1021KB
MD5

98d006fbea457ec76243cab8f7f6631a
SHA1

27a307b2fad0bd6950993e77830a8ee2c54a405c
SHA256

af8f26e8a970e480790b6c09289d3ab4a2dbf6097b3ac5dac323ac9ea433531a
SHA512

2dce986f81ec67f050f40f31751ae1080c97f324be64fad46c3f02872e20616f30d2d44a76c9c6b7c1a9e9560d5a035d6d94059d6f239039b371286cd5c8789a
SSDEEP

24576:122Fe9LDAELf3Ofd8mziU+m1SR1LY0+vL:jULDAEyfd8mzx+Js

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
360bowser.exe

Files

360bowser.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1018KB - Virtual size: 1018KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ