MalwareBazaar[.]1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MalwareBazaar.1
Size

738KB
MD5

ace646305ca87cf356dfcdd8afaf6a46
SHA1

ca4e9e696f2f7e4bd20862882697e5367948388f
SHA256

d95b6633dda753ff3d155c488e0d0033ffa970be199d655320e57846833566bd
SHA512

b4659e0714402a31792ea090747c9214eaa57857ba9f8376a82adab0373dea8b0c081021269733f2264338a9201378e54c5b1b958b9e57997eee7b18f656060c
SSDEEP

12288:8AMwoIc00IAUf9gYjuV9KqBwbAF/cOPb7fpNbZNx7am4yNh62Y1pA//INpmZiWrH:8RwoIc00IRVgj/K/AFbhNJoSEpAYNoZV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MalwareBazaar.1

Files

MalwareBazaar.1
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

jVec.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 736KB - Virtual size: 735KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ