Installs Bot [@superstar75737] (3)[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Installs Bot [@superstar75737] (3).exe
Size

82KB
MD5

6f0a0b78bf284f94d490b876bd55741c
SHA1

79f69f3192f78a1db16a6608954fda532ad3ab12
SHA256

dc1daa907b79dcc865b45947d734916247010d8af8e5cf6f44696b614c562017
SHA512

812d2f38a63ec648e078f96b6faa3f49d6e83b8c5f979b355859cefe0d1f8b6a59c426253d89c6a90bb53bc159373907a6197effa58f37c49337061db3f2bb14
SSDEEP

1536:uZD6Tnu5vQDyMeptGy/HWEe4zytuKZRB+psvejS:0D6Tnu5vke7XOtuKZRB+pC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Installs Bot [@superstar75737] (3).exe

Files

Installs Bot [@superstar75737] (3).exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Bender\Desktop\Repos\Installs Bot [@superstar75737]\Installs Bot [@superstar75737]\obj\Release\Installs Bot [@superstar75737].pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ