VespyBuilder[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VespyBuilder.exe
Size

12.3MB
MD5

e3dd0bfe38b07d750d2c13da80d9155d
SHA1

54faa6396f179908918b4d5f1fdc4e99ad6fbb5c
SHA256

99c24686e9ac15ec6914d314a1d72dd9a1ebece08fd1b8a75e00373051e82079
SHA512

cc4fd7bb810b9117f4ebe6217eb615c266aa30a2adcdbf6c57db6d1803e7a28c9e74261036659dbf1bbf1538f9a457199967dfa8e32e249e3f45237e96a52395
SSDEEP

393216:HaXuGHyMeW9/MkMVEoucpzXN78c6GxrLx:H6VDe4OAIx78c6CL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VespyBuilder.exe

Files

VespyBuilder.exe
.exe windows:4 windows x86 arch:x86

6f462fcc6b830b77fb3fef2add9dc570

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

malloc
_sleep
memset
strcmp
strcpy
getenv
sprintf
fopen
fwrite
fclose
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit

shell32

ShellExecuteA

kernel32

SetUnhandledExceptionFilter

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12.2MB - Virtual size: 12.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ