MalwareBazaar[.]27 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MalwareBazaar.27
Size

683KB
MD5

be9ac7ed55c33abd28d9d88526090344
SHA1

bc8bacece955cf0da82762453393a2c6f85de8d9
SHA256

e26bb32d388b915426c296a31ac7148641d8529389338f4cbb67d7faf3b5329e
SHA512

7539c01698d54d64195135e0c5b7ce0f62a1d193a6a2b272005d22b4cddccfaeda96cfac7c6145184681f4f0d39767d55f5790869098a991d48958afcbfeea82
SSDEEP

12288:gyk1evfXSR/hpIFlLrYNQZk25j5R8VEwWCUt5p35+xryPuu7DZ6wuLH4wcxIcwJu:vk0vfSR/7IFlr6QZf5GEwOZpgN01qu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/FFAOL20240705.exe

Files

MalwareBazaar.27
.7z
FFAOL20240705.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 733KB - Virtual size: 733KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ