AutoClick MonsterClick cortesia de bb-fans[.]jimdo[.]com[.]exe | Triage

Sharing

General

Target

AutoClick MonsterClick cortesia de bb-fans.jimdo.com.exe
Size

541KB
MD5

303392c2b97f34ba8c0a186bcf564957
SHA1

f074c6ce8b778127cc913f2dbb4ef9909cbd4248
SHA256

172dc66264eb6bb04542036e1c4fe540dd33f46239fc238303daf4a56f60efaa
SHA512

1df8fabb8995f3e8fc64b94d39d92ee49f22c9fa3b6149a620a6fd24bbf9fe217474567508f94edf251df4d49909820d5c0519a0be55259676752d62ca3b5672
SSDEEP

12288:DLr9lqYW35J7oOhE9D5RTA2RcXGSskarz3wF2RcXG:DnqP7WB5RxSpsFhS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AutoClick MonsterClick cortesia de bb-fans.jimdo.com.exe

Files

AutoClick MonsterClick cortesia de bb-fans.jimdo.com.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Broker\Desktop\AutoClicks\ULTIMU\By MonsterKing\By MonsterKing\obj\x86\Release\By MonsterKing.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 404KB - Virtual size: 403KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 159B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ