Black&White[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Black&White.exe
Size

14KB
MD5

00dd057add024c605c0414a985d31c32
SHA1

1d00812873ff86b33120923b705c872e13efd5cc
SHA256

2665f52d47ee7dfbffabcf58c0da31e311d3efa97442e85944a61bac8629e2af
SHA512

3eb9439c75ac9b32a121ee959aa94f11a5c73d26aa24d76bf0af149a045ad1368711797ef949ba834cb6da970005b5e829bc96fba5d841a2256022b973000226
SSDEEP

96:kgqL3TmVcs0b4YCnce8jF6d5is5K84AMfqOJxj185r045wjgWkRGbJCr6x/EBq5b:YAkMYCnk0R1M7nTgjYEVSCAs7qk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Black&White.exe

Files

Black&White.exe
.exe windows:4 windows x86 arch:x86

5dd1836c1e224904e3cd2a87112e4138

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm50

ord588
MethCallEngine
ord622
ord594
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord100

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ