MalwareBazaar[.]0 | Triage

Sharing

General

Target

MalwareBazaar.0
Size

611KB
MD5

2abf1feccbed2d68bccdbb29746146e3
SHA1

80f841498f9cac7cee72dfab3a360142b326ee6a
SHA256

fdf11dc1585e1062c299ee652e789da5091b836f2fc999c99f0e6833e9d0db6b
SHA512

5521b73c2bc506c39870884edd05dcc13caee166e28711411123c342b18fa37a4c8e73ea828df44b2796968c16f42e59101ecfaa9de267bf9585c92fa8f210e8
SSDEEP

12288:hxNZl1O97whWtLut3fbAtCylocPpGD11v98qskaiy7dal7GMB:LHlkBkUtCLcBGDqpGy7oGMB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MalwareBazaar.0

Files

MalwareBazaar.0
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 604KB - Virtual size: 603KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ