GetBSOD_2[.]0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

GetBSOD_2.0.exe
Size

13KB
MD5

548a920ed20cbc04a573e1229fe184cd
SHA1

e7bb627cbe893b68e0ad9144dfbe43251a5216eb
SHA256

824dd95c6f8b7de451c3469a036078c8b0f7035473bd74e9b64644d712b69850
SHA512

8d84b9c62e8f9cf5fa5f5b60a58e35131bfdf00fe9358082ca26bd2098a36f9cf34c1eedcfa60dba4f7da1ed481a24f9ad77594cea1b3c11d4355ad5db438d0a
SSDEEP

192:E5BXCzucLAkouoR9cHjUB5uA5N2XVXSfVA8vkYcV6QU2FJFEs2+:E5BXehQuA5NcVCfVA6kYcV6QUiJFnh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
GetBSOD_2.0.exe

Files

GetBSOD_2.0.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\egzhe\Desktop\GetBSOD\GetBSOD\obj\x64\Release\GetBSOD.pdb

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ