SHOZAB HAXOR Scanner[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SHOZAB HAXOR Scanner.exe
Size

756KB
MD5

95329881c7dfecf3698fc8b7f8b97495
SHA1

60b49786a92767eaa1a2df7d5d237ef06f23687e
SHA256

1a18814a9c33892a75ef5c8514e9ba0ca2a77ab91a6d4afb219c6df6ffc9fa55
SHA512

f4f44e89d774053c9af6cf7c1e13059a08fe660726eb28e4cb3ed57196ed39be6fa4177dc960ff18be14ab32a030df641744681df0e5ce2c8e7827327c70ea69
SSDEEP

768:JapcpTnmy7CQBcQ5cG9+Ukeps58Q8bXPnBUluyXapcpTnmy:JTCi5vkepIKbfn+xX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SHOZAB HAXOR Scanner.exe

Files

SHOZAB HAXOR Scanner.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\SHOZAB HAXOR\Desktop\NoshareScanner\obj\Debug\NoShareScanner V0.1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 390KB - Virtual size: 390KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ