Static task
static1
Behavioral task
behavioral1
Sample
BigTroll.exe
Resource
win10-20240404-en
General
-
Target
BigTroll.exe
-
Size
37KB
-
MD5
00931aaa2b7d4492f94ccd18341c13d3
-
SHA1
9cb06c0220e3876c5356192e9f02101956da042c
-
SHA256
b0d7b6317cd88bb6fcea12333958ea749955c52c927fb4c12cd41ebac71ec58a
-
SHA512
f1d625ffef6907b059691bbe308247d0bddd5a9e1207d319ba5b2908d27714760e2777d25933141d2f43638effcc88ddbf458e2e79bfd295be8fc21dfc9b6e78
-
SSDEEP
768:yklrsXaWHvnYaOKf/fM4fszqRyrdGj9Xz1QB6S93NY:ykgDc7q4u9D1QoU3NY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BigTroll.exe
Files
-
BigTroll.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ