b4d5327520258b4bc9aa13e2c92d6276 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4d5327520258b4bc9aa13e2c92d6276
Size

520KB
MD5

b4d5327520258b4bc9aa13e2c92d6276
SHA1

50dcb53516dab30275daf5a0c361ae8dbe71eebf
SHA256

e0982d9e4b8069d8bc8f15f0b5b90d2e57c9ae5fc80cad0ed2dfd9baff646a87
SHA512

c222322c957de4c3ab6044346442d1c6c4ab71df18352a0250e96ba34462d26f61a595c4ff5aff5c47d6ec9f13c3a14596bc96a2366436b012f00c19a7b62c9f
SSDEEP

12288:v6ZXwiEmzo4lnVIDHEdczLGAvHk3fM1l2MqHje8Qod3WcO:vUAzgoWtWGAvH4GqHVZwcO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4d5327520258b4bc9aa13e2c92d6276

Files

b4d5327520258b4bc9aa13e2c92d6276
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Vinshi\Documents\Stealers and Crypters\3.5.9\Bartek.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 504KB - Virtual size: 503KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 117B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ