HybridLoggerNew[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

HybridLoggerNew.exe
Size

30KB
MD5

5e33ee073722aedd5acf5d1fff1e1022
SHA1

f3bb51170e58f504bbc1ea0fad2a4285b3c27e39
SHA256

15e1667b7a3f98af8dfb49176da38df989d3cc1745940853e98a6acc50ef4981
SHA512

fa8457e5414fb669e79e30e9fa9336f15cb3cd6429cccd86bcf6b2c33483d1711a8741371016a9a9180d6687f993621d8110de48f3e7f6fbfcc930e6742c7a89
SSDEEP

384:gTHcwVFdT4Pg777p7771/77V77WC777kA7771XWwx99zHtNmrT777SO777QL3/KC:gT9lXz2OL3/K7TodXusQISO+nXtYr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HybridLoggerNew.exe

Files

HybridLoggerNew.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ