BolXEmu v[.]1[.]0[.]exe | Triage

Resubmissions

08/06/2024, 11:27

240608-nkqlxabb5y 3

08/06/2024, 11:25

240608-njkn9sbb4x 3

Sharing

Copy URL Twitter E-mail

General

Target

BolXEmu v.1.0.exe
Size

50KB
MD5

d986e31cf9c11163cd11855fb104f950
SHA1

6110a0e032bdaac294f179a69609479163ef22e6
SHA256

2d4ae32b7903b2c31af1befc93fdd03b6ab944d7b391cf550408b06e95312834
SHA512

51ce79645b8ccee5eddd6dfbe52dab9fd7f2f46268eb1ac6d21cea1fdfeb7e9ff298c6639893cfb6e4934c908b234161470ad2cebb72688215815f6162e175e5
SSDEEP

768:K/O9Ndj9VQT7Ox9nGkdC2wR7OYlsiKn/Ooi0Ocvpd37bsIm2XPVrNqir:K4dgj81wRH6G9cv3M2fV3r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BolXEmu v.1.0.exe

Files

BolXEmu v.1.0.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Stipe\Desktop\VB Apps 1st Versions\Za-sve-Unutra\PS3mobi\obj\x86\Debug\BolXEmu v.1.0.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 150B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ