bomb[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bomb.exe
Size

4KB
MD5

537a1256e38fe2302504ddca2ccde597
SHA1

87b51c33a827da3318dc55c3ba58815840935419
SHA256

e4874176bd06f120f8d20400e89c0a04c401e82d300656719b0472da1c558ab2
SHA512

478024c162926b72e91a19a6553bc43b9d9006d48b2b688b35c90b2c755abec14b632b6e9420347c5d6e8561f682ce88ba6e3a6e1b8d92050e53f939be23430c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bomb.exe

Files

bomb.exe
.exe windows:5 windows x64 arch:x64

Password: fasdas

588c7ea193431df0bb48d62499f74c3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE

Imports

kernel32

GetVersionExA
GetStdHandle
WriteFile
FindFirstFileW
FindNextFileW
FindClose
DeleteFileW
RemoveDirectoryW
RegOpenKeyExA
RegSetValueExA
GetModuleFileNameA
lstrlenW

user32

MessageBoxW

advapi32

RegDeleteKeyA

Sections

.text
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 702B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ