Betting Assistant iBook REQ29[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Betting Assistant iBook REQ29.exe
Size

1.8MB
MD5

0ecfa0b650eabc993b17513145a4de06
SHA1

2a0f146b440998d2f3a4b2dc3e420467a97b00c1
SHA256

ee18f12a6e989c7df135a321bc3f78ce55a6eb78ae1bfa766e80d4a19d38c9b3
SHA512

cc34289fc211f1cfd12cb3ccf12eea6101faf90a9b188fa68377261da00a8e038567853c2dccae4ec09b91c4d7f6efbab3e0accdfa9f8f954fa3be741ef36707
SSDEEP

49152:nI67AhmHMF6CKl2QGw2A2IOjGlSqXF75nN7ualjnLLTnLbLUBlWOyGOmSG+hUT:I67AhmHMU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Betting Assistant iBook REQ29.exe

Files

Betting Assistant iBook REQ29.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 840KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mackt
Size: 4KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE