adba789ee81be563f86c6d6539e0a577d00a3df3962e3e02cb9875c0881a3905 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adba789ee81be563f86c6d6539e0a577d00a3df3962e3e02cb9875c0881a3905
Size

310KB
MD5

2b8cb25a007e473e0b0c354bed4742bc
SHA1

ef166f196df1157f80e52cda06a80d806ad4f789
SHA256

adba789ee81be563f86c6d6539e0a577d00a3df3962e3e02cb9875c0881a3905
SHA512

fa4038851d5a7adc1b57660e9fce938960e3c595eaae20ed546b7f1eb5555f02ce8b6bc37668600e622c33652e9b58a9dc5e236463e85aba129f96c86d789a34
SSDEEP

6144:iRrVF/oEqERTad50O9+vDkC6hP8XkMvtc1CYEJvgP7QLbRKho+:4/oEjMC0+vb6VnovMmI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adba789ee81be563f86c6d6539e0a577d00a3df3962e3e02cb9875c0881a3905

Files

adba789ee81be563f86c6d6539e0a577d00a3df3962e3e02cb9875c0881a3905
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\develop\BitCometExtension_Chrome\bc_launcher_for_chrome\Release\ChromeLauncher.pdb

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.spm
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE