Exe to Vbs[.]exe | Triage

Sharing

General

Target

Exe to Vbs.exe
Size

36KB
MD5

7ba2a8fe489412f4f3f4098002681ee8
SHA1

d6131544e2ff4bd2fac94dc0be99d4e6bbead361
SHA256

9d0fbeef9ae3f62c7baea0dd3bfb96bba457c75e25eb6c7fb26ab93da1d0ce1a
SHA512

67908343cd92c9a97e3dd36ee4328da4e09c3385f5ce839940dcf66a68478c06061835c6588a1cf7f8e4518c22d8c31a4f4f5692f5ab9d59002c8a5b81739dbf
SSDEEP

768:InXbfA5OzpkQgpe9YJ9sFml5McdX3Fw2XdkO4cvP+r8UgMUUgMSh:wA5OzpkQgpeursFe5FFwukO4cXhUgMUj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Exe to Vbs.exe

Files

Exe to Vbs.exe
.exe .vbs windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\!Background\!Programing\Visual Basic\Exe To Vbs\Exe to Vbs\Exe to Vbs\obj\Debug\Exe to Vbs.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ