MalwareBazaar[.]3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MalwareBazaar.3
Size

517KB
MD5

7092f380213483470295ec380eb16001
SHA1

a7163e6146678cbff533f11cf7bfc77665eebde1
SHA256

820485feb8d8b9c13f3f2bc037f7918b0a38526c6f7193f878b2d410572dac26
SHA512

c5ee777d550c058bf0cdf45c0d86e9d48d16d13d4349bfa3fddd13d052f1e81454797a3a47bfd9154588c601e249a610ca20a15c2b10689a14e78e52980bcfbe
SSDEEP

12288:hZTPGQ3byfjwr/FvPEhKIKbF+jpyLtxQh70I:v/8KIKbUQxQh3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MalwareBazaar.3

Files

MalwareBazaar.3
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 448KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ