MalwareBazaar[.]20 | Triage

Sharing

General

Target

MalwareBazaar.20
Size

878KB
MD5

f59c2ccddb6294bf18fff71a7d16f9c8
SHA1

b32f1a41c1d05eee359e934e3f65e79c654915d5
SHA256

2c0f066caa7ba44e2f6df2a751d4e3584529938885a3a004e318a8b66193da98
SHA512

57a0e3187adae73e5c717a6f0725853153505beb1b02f8688600d3cba3b06047b20cc6fbe73db4afd0735f1c41a32be64495ff7e017e8be4ca828682f7bc50a5
SSDEEP

12288:WQbUDRl8U+i+U7o9l6eZi/0K+GKS8Dk3f1DgteFpLXV:HalWi+U7Ylc/H+A8APRFpLX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MalwareBazaar.20

Files

MalwareBazaar.20
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 810KB - Virtual size: 809KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ