BolXEmu v[.]1[.]0[.]1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

BolXEmu v.1.0.1.exe
Size

75KB
MD5

4304dcb67e5087b522c51475b6f2292d
SHA1

165bdb1936ce54dac6e708921b10a63d47b54f12
SHA256

f3cf3548d32b07f66e769f479947d912e8fa5ca358828c81062313a786a4911f
SHA512

2bc1a22d265a737a3b0332e83dcbe5b983dc14a6c559184a7a5cbe78a4ca4d8974056e2d8a4c2ee77c3763da8aa921653e5a95f16a370f2159ccdf7411bdd94e
SSDEEP

1536:Rdga7Aaf4abZOXFgpPcnF1pxJmZZZwl+OCa2fl:RG8AREEOpPcnFTxJmZZZwkOCa29

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BolXEmu v.1.0.1.exe

Files

BolXEmu v.1.0.1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Stranice\Templati\Templati Web Stranice\2017-2018\VB Apps 1st Versions\Za-sve-Unutra\PS3mobi\obj\x86\Debug\BolXEmu v.1.0.1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ