bytebeat pokus[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bytebeat pokus.exe
Size

5KB
MD5

c4ea800fde7a101823b09d1cf9a6f502
SHA1

8d91003efa3fadbd6250fb1b149a98975cedda22
SHA256

5792cc5f375c811ae1861250926043a83e1d2d8d04cc2b9151844561edf6b8e6
SHA512

bd24c8ef18a464f2777aa45a815ecb3376174ec963ddd729b4fd18e8c7e0aab219489b9ab6df585370b422b838c1ad1b85bf358f5d0d7868b8a8017577b7f3eb
SSDEEP

48:6ya907388LGV2UqfuY2iucFukhUnKz+O5Jk6+YlZOqFrQnulKzO5MqHpfbNtm:E038/zououcFukOKzq6+YCWsuAO1zNt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bytebeat pokus.exe

Files

bytebeat pokus.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\stepa\Source\Repos\bytebeat pokus\obj\Debug\bytebeat pokus.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ