BadAssMacrosx86[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BadAssMacrosx86.exe
Size

82KB
MD5

f16d28b8a679b7767b75017fb5886458
SHA1

2dbd62c07e0076fd4ba0b4eb4301e70cfdf5a7a5
SHA256

1aed10d2ba27bada6a2ef163eae2be05677bf48ed59e40ba516c3c941cbdc2b6
SHA512

fb43e65ffc32eb17963a2fb3cdc6d75e09386f97e0a1659f006091cc0201d6b5e26a5e6b8a1f2d5db0d38a5cf954db83f562c5de5dc471018db710c4795d17d7
SSDEEP

1536:CecsWpmNeW/P0i4dkJWDKKeOYCzVkQN9jpGUM2exmflKiBTH:jcsWpm4iHIkCbeOrzVkwL7KiBTH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BadAssMacrosx86.exe

Files

BadAssMacrosx86.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\sbasu\source\repos\BadAssMacros\BadAssMacros\BadAssMacros\obj\x86\Release\BadAssMacros.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ