8b049935dd28142b39611f9129661d9f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b049935dd28142b39611f9129661d9f
Size

26KB
MD5

8b049935dd28142b39611f9129661d9f
SHA1

f80c8918efb536a63e143e3cacb54f01315fd8aa
SHA256

7828aeae97bbd1768a8c68f36273e987a553a1a7002e73b2da539e632c230d08
SHA512

7a747a3b435de8690a4f89475ef7f229c2c9d43a7acb34bed54cb0cf3de4942e68ffd8593778d3beebe726e189d4eea6ceaea9f1a2048ce8b183a91654e79fef
SSDEEP

384:HkvwKwq6uPkvwKwq6u6ldrvuK9cE8wVYzxL/45sAXhQft18qO06jqVG:WdrWTE8wylFSuO0iqVG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b049935dd28142b39611f9129661d9f

Files

8b049935dd28142b39611f9129661d9f
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Users\Marco Frattolillo\Desktop\Germano Mosconi\[UG] Nostale Hack - EXPBot BETA\Nostale Bot\Nostale Bot\obj\x86\Release\Nostale Bot.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 191B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ