GrimBigTrolling[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

GrimBigTrolling.exe
Size

3.4MB
MD5

adda5c09ad4dd518df2407e6aa522c4a
SHA1

cf09f506a8ad5be5541c8b5cc361c1aa5d84aa50
SHA256

97d926985eec60da4dbd6a2346adc5dff91158af2c43e4b1974c246e18f1750b
SHA512

128927cdc7cd91dc5a92250ce1c9d740e5e94f84ed0778c1d22cd0539f8cce629ce9bbe3ebf128c14b72e20689972fd1098aae99b00c796a834ba8439f43aaf8
SSDEEP

49152:zGYvXzezUkdxssWl8Qt7Qdxwx4SGgQmewjOXCdm4vZ3OCJkhv76vp1mcObid1V1:zRvjezN2IqqS0YyyXv/4D6T5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
GrimBigTrolling.exe

Files

GrimBigTrolling.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\skills\Desktop\GrimBigTrolling\BigTrolling\obj\Release\GrimBigTrolling.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ