bomb[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bomb.exe
Size

4KB
MD5

25f39f736b82751167ad6c06693cba87
SHA1

def775d52413b067e6d20b601e7eefd5a922c978
SHA256

4c58595d70c346c7978afd627ad22e0e83c960b9cf4790a4564c51c241a76b05
SHA512

8f9da0e6611c23b35793c6d65d828519454a06a05e7b3063b123d6a9c29ad35f18e2a7c6b2fddee93eb6d7cbb56dcc83c3a71fa0f4d210acc849061078a48685

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bomb.exe

Files

bomb.exe
.exe windows:5 windows x64 arch:x64

Password: adsadasdasdas

588c7ea193431df0bb48d62499f74c3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE

Imports

kernel32

GetVersionExA
GetStdHandle
WriteFile
FindFirstFileW
FindNextFileW
FindClose
DeleteFileW
RemoveDirectoryW
RegOpenKeyExA
RegSetValueExA
GetModuleFileNameA
lstrlenW

user32

MessageBoxW

advapi32

RegDeleteKeyA

Sections

.text
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 702B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ