469dc41e8f183829966e73a7760a4f3b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

469dc41e8f183829966e73a7760a4f3b
Size

26KB
MD5

469dc41e8f183829966e73a7760a4f3b
SHA1

af6b2caa81855d8c057234103aac93b0a66a6370
SHA256

09f35a298512a031d7d0aa95141de37f03741bf20a97a03c019ce7e57db8f734
SHA512

388a3f0fff43507535d5b9f50646582238ead0b1a64bb36d1177ba6c87b8e73f9794858725adae176d352800ff693f6c6f0e14366d78b7ee6e76362c9d82dc5b
SSDEEP

768:wuxRIbQqAxuO30tI+3Kmbk3V6fa/y/2hCjLUhBi5:w8RGNdO30zTklnyICjLWBa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Fish.Bot.V.4.2.exe

Files

469dc41e8f183829966e73a7760a4f3b
.rar
Fish.Bot.V.4.2.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ