pikabot | 7600d0efc92ecef06320a1a6ffd85cd90d3d98470a381b03202e81d93bcdd03c[.]exe | Triage

Sharing

General

Target

7600d0efc92ecef06320a1a6ffd85cd90d3d98470a381b03202e81d93bcdd03c.exe
Size

84KB
MD5

a9e579efbac55ab1c3a1ca4e1d288507
SHA1

6e654197a94bb1b045644fa8e37cdbd5a891d00e
SHA256

7600d0efc92ecef06320a1a6ffd85cd90d3d98470a381b03202e81d93bcdd03c
SHA512

b89637295af47b088e5ead849a016c826772c7501df2fe0f776502d2aeb3abc767410d1eccfcd998751c06c7e89e9db4f64c6ae1fb6f1a359686289cab2236b3
SSDEEP

1536:ZRe88iq2vZOX3Eszsbt4txy3pWRUj/8IzsZp1mLhcsm9Q0C:eilvQX3EsgpowpWOb6pkLc

Score

10^/10

pikabot

Malware Config

Signatures

Pikabot family
pikabot

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7600d0efc92ecef06320a1a6ffd85cd90d3d98470a381b03202e81d93bcdd03c.exe

Files

7600d0efc92ecef06320a1a6ffd85cd90d3d98470a381b03202e81d93bcdd03c.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ