bobby[.]exe[.]exe | Triage

Sharing

General

Target

bobby.exe.exe
Size

18KB
MD5

b1505998d8afd019bf6dbfaf0bf2f22b
SHA1

b323ce2fe6b06b66d58fe9d37ebbad057b3dcd5d
SHA256

3df4cf45efbda747693c01ad7cb9d6101409d35f86be137eec672b7cb719ee43
SHA512

2070739924579aaf2953aadc0986c67bbeefc9fc5c38827778e43897045c7495ff0a18cc2d1b4ea4b401ccc3eba3c7ff7b7bae62bacee97591900a33cd106ff8
SSDEEP

384:/u5eE1B308UXvb+Oi/RpkoDrye3DeKBQ1yHlWgVt:25eCqPXTk/DkoD2eTTG1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bobby.exe.exe

Files

bobby.exe.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ