Email Combo Leecher[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Email Combo Leecher.exe
Size

1.2MB
MD5

e16c5db36fc83d84a2e861999ba54c8d
SHA1

c07bf3b81a7fe3fe516f662c950bff114c29e2c8
SHA256

d5c5a1878345c258f5ea99cbc30c115fde9c5a54acfee942c616348c729d55e7
SHA512

588902d0a5a5f0f842852b7e25885a573b57f76a3c1db4ee3442d1a79b61eef062d890b9dc5c1d4fa707bf3b62ee017657f0be93f1e0f87ae6418766fe54d1d5
SSDEEP

24576:2QDijmQ9sF17qGVKntK0s/YDHtCzTwd+jQDgN5kuNoeN:2QDiRYyk0s/YDYTwyz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Email Combo Leecher.exe

Files

Email Combo Leecher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Marko Radovic\Documents\Visual Studio 2012\Projects\Email Combo Leecher [Coded By SyBeR]\Email Combo Leecher [Coded By SyBeR]\obj\Debug\Email Combo Leecher [Coded By SyBeR].pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ