MalwareBazaar[.]0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MalwareBazaar.0
Size

669KB
MD5

c4edeb33964456360364a78f894323ed
SHA1

1bc8510b8be64ef7020ca4c66d11ed7c73d07fab
SHA256

9b68341fcff6e240091e1b64e9c391017751a1883bc3f439e79e1c7f368c226e
SHA512

c3d46d038928746f294f2ca2029b404b08a6ae6b4cedfb8211c1f6771e4953ea777c90b630e7277f7be764d32dd2031d7fa7556d01a7f0ff07120e17ff0fe87e
SSDEEP

12288:IulHiiWaLfGAfQ6LKkIN3u9kYjMZv0BFN5kzSGfzT17sngf2d:IudpWaLuoQ2KhN3NZvs5QSGFBg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BBraun PO#4502070446.pdf.exe

Files

MalwareBazaar.0
.rar
BBraun PO#4502070446.pdf.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 708KB - Virtual size: 707KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ