MalwareBazaar[.]0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MalwareBazaar.0
Size

690KB
MD5

4fd2dcc1c52f67398ecd6177b9bda06d
SHA1

309fba0fd940cedaa93c29dbcfd19721f64a6ca7
SHA256

3aa362e2dcde61c32408a3f44e6ae52da3c68494c013c57438f6b947b2ddc14b
SHA512

b6f1d01024aad89fa627b7231b69d147627fa6103787401e798ab823abc4a63d67f91afabfa85fe39f47f2982b53977d8c0f8cc578d6052b176c718a0a6390b3
SSDEEP

12288:Q7Wg87Kdnw+KQ2nd6lVJcDwWgfGQUX9cN/X+ohzHXLXnqekl2TNzbUq5nA+:o6QnPKvMlVSdgfGQUtE/p3TnLzAqO+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Scan_SKMBT_EPDA _ SOA_Payment Reference TR-37827392-2024-07-22.exe

Files

MalwareBazaar.0
.rar
Scan_SKMBT_EPDA _ SOA_Payment Reference TR-37827392-2024-07-22.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

jVec.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 736KB - Virtual size: 735KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ