bc72f283a8dd2666ea3f4b9ddc49f70f1c02ae732ddd4aa41f20a11af32ba82d[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc72f283a8dd2666ea3f4b9ddc49f70f1c02ae732ddd4aa41f20a11af32ba82d.exe
Size

132KB
MD5

bc185611c97935de704feec4898a12cb
SHA1

0369210e6e4ba3f9a58a84b2077c06272a58ae4a
SHA256

bc72f283a8dd2666ea3f4b9ddc49f70f1c02ae732ddd4aa41f20a11af32ba82d
SHA512

fb4a8ef10410c0f45254c3d73fab3ea3c5f9a73c02054fea2ac50fe2528223893e0f633c25c6df3499a23a186282af9d55b901dcfe07b24d6616bbc20e3c478d
SSDEEP

3072:bXGBC/lW8eCQUoGiFffkqlNy6rH5JUWsv4D6wl9G+:3/lWFLUoG+I6r7U49G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc72f283a8dd2666ea3f4b9ddc49f70f1c02ae732ddd4aa41f20a11af32ba82d.exe

Files

bc72f283a8dd2666ea3f4b9ddc49f70f1c02ae732ddd4aa41f20a11af32ba82d.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\Pillager\Pillager\Pillager\obj\Release\Pillager.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ