bomb[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bomb.exe
Size

4KB
MD5

07de5eb36bf772e1fad04b4174bf98c0
SHA1

4a9a47b90640a23e9ad244c4bba9e3890515540f
SHA256

3f95ea720bfa7ac03197b61e78dc9f7d075a90434a868975e915d7b2a852f6fe
SHA512

c3dcc96e25fc8c76a6eacc6487f94c880376079270dcb18bcb49d657a7af5864e9f2850fabc218dda30fb7b6a46e512856952e393b9ed38cf2188aabaa3d76ef

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bomb.exe

Files

bomb.exe
.exe windows:5 windows x64 arch:x64

Password: withoutmanifest

588c7ea193431df0bb48d62499f74c3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE

Imports

kernel32

GetVersionExA
GetStdHandle
WriteFile
FindFirstFileW
FindNextFileW
FindClose
DeleteFileW
RemoveDirectoryW
RegOpenKeyExA
RegSetValueExA
GetModuleFileNameA
lstrlenW

user32

MessageBoxW

advapi32

RegDeleteKeyA

Sections

.text
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 702B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ