Triggerbot[.]exe | Triage

Sharing

General

Target

Triggerbot.exe
Size

656KB
MD5

0ed08c554058692eb2ab10ff7f91deba
SHA1

597e8857f10e45717272824270bf7e9e154c2fb4
SHA256

f1426748d5ba9911439c4b60a54924894d1e4103a4a68118b83bbbceaaf599cb
SHA512

244b538eb1c757e0aa5206ea49adeef9a40e6b18f38ab887d367f0f166fa655aadec3db27c0d72a2f888ddc1d5141e7f89c9a3ce261e63009a20779652faf9a6
SSDEEP

6144:exmtZoAkWJEZ1mGyFQlQ7ckn/Uo+dW03T7b+iq+FvnSsxAXboBnK5dka2UdnCeta:jDXMZ6GQ6ov2m+UtbVkGDvAd10oh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Triggerbot.exe

Files

Triggerbot.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\dbart\Desktop\Triggerbot\Triggerbot\Triggerbot\obj\Debug\Triggerbot.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 587KB - Virtual size: 587KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ