slam[.]ransomware[.]builder[.]installer[.]exe | Triage

Sharing

General

Target

slam.ransomware.builder.installer.exe
Size

6.3MB
MD5

74bd5f609dabc4f942d8a8efe45e8c6e
SHA1

6955b5e2c45ff24084384ab5af0ef752f1b85e2f
SHA256

5b9b5f27d6f7be21ddb67a6fab7d1b5b876b9231bee48841c27760f6f8a49692
SHA512

043b12f9589cd7bab9b440e5cab0bdfc2b33f283dc34cb1102d0ad77c9d023db3a2afeee04a111bb00c988b41c854074bc17b51bf7396ca6692fe63c6f214d59
SSDEEP

196608:GO0jDOM+uGFAgEXlhsjPMxKrjBlU3UG62I3Hpd9j:GO03OJuGqgxPM4rjskG62I3jZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
slam.ransomware.builder.installer.exe

Files

slam.ransomware.builder.installer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\ander\source\repos\slam loader\slam loader\obj\Debug\slam loader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.3MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ