MalwareBazaar[.]8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MalwareBazaar.8
Size

776KB
MD5

aad475fcbff1954bc6b0e0f31453cd32
SHA1

0ff88a3a9829d6f17f4febea5fd434ab70825f65
SHA256

a86f818dee5adfc18c4b4c5e547e5f51afd5eaf6f1208d2c9869018c4d1ddbc3
SHA512

57e88247046d2435d839952ad00e52ebc95205ba928d7e561e9aaa887da7ef354b7a4aeaaf316ae3c1880c9cc5951ce714adf761858aa47d0cab76322a4b1f18
SSDEEP

24576:Y/4rDh+93ZZtRKuWwYWuAtTPLXR0rEqKUxGOT:YgALKuNYWb+rEldOT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MalwareBazaar.8

Files

MalwareBazaar.8
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 707KB - Virtual size: 707KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ