MalwareBazaar[.]18 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MalwareBazaar.18
Size

950KB
MD5

f7c5207baab90097db05c2359bd6b21a
SHA1

25979f67b011d578c2cca0a74ab48b1119c8b46d
SHA256

57f8b41ab0670d66bd0c9c6d4a21268b96b5501fc33dd6e5a8b58a09983155b6
SHA512

e9007233ef82d4cea9e53fa14a938c2a3c9e23acc949781372df31a6757ad18b09ac40ed30f1e31fc7a23cca1599b290bbdc7b915076ac9241ec9e83a0391e72
SSDEEP

12288:P6ub9XjilseLYBhXrMeT7e7yIw9LNg9ZunLPQeZv5KbqpjGAYYMPDthjU0AV:hes9re7lw9Wr85Zv5Kb0iVDt/AV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MalwareBazaar.18

Files

MalwareBazaar.18
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 947KB - Virtual size: 947KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ