MalwareBazaar[.]11 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MalwareBazaar.11
Size

811KB
MD5

7dc8ba9345de935c7b90ea6c61f3464f
SHA1

78786835c8b7b91c0223e970a45b50176eb96b33
SHA256

fca147ee2f07c81f599b17e6957d45b40dd29518e9ff97bb90b742ea1c27bcea
SHA512

47ad7a37a6b95873120f256c957eaf5de91a2b6c05e86238c79f5daae130974b1b10c01459e8e2c0ae0c8b051225c1784c20807f2e9813d7acb3760b4a9a29f3
SSDEEP

24576:p+1bAypcVKaAbK7hZ9Auf0K/KoLO8CZXCmFv:oVOca8K7f9rcK/HGl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MalwareBazaar.11

Files

MalwareBazaar.11
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

thQh.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 787KB - Virtual size: 787KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ