MalwareBazaar[.]11 | Triage

Sharing

General

Target

MalwareBazaar.11
Size

1.4MB
MD5

f1176e8d6662faadee1e912fc2da0147
SHA1

d25d2f1d83d48bb502297a049d7efbbb54b07967
SHA256

5dbbaa22b757de07d0fb4b665b1863811a2e80498b5265ee903c3998a8684b6d
SHA512

dc4ebbd293f29bd4b459895e3d58237b21c3b5bf82968d942301ac059dbd4ddb41bd15c75da33b1657678b6351a90049c5a3bb0b71b9887f8dbe24669bfdaeb6
SSDEEP

24576:5f+6UNxk0J9o03BxVtNpTZXJ8PFAx7Yfs1KyyL317qejO7a/eSW6g:5G6U80JK03BxVtTIPFA8VNkolW6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MalwareBazaar.11

Files

MalwareBazaar.11
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

vlzt.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ