Stub[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Stub.exe
Size

29.8MB
MD5

a35fa5b9b81ab0f95c0154f314651f3c
SHA1

b15ee449f9cbb33471c589107d08a44ad3ae0da8
SHA256

6ca9d3ef08e0a1ef058d1756e1d2ad8b07cc34e0ded66f63ee856dea737ffd80
SHA512

7a6d2987ef4df80664c87720e00c9940a049662d5bb6a10d4995ea73a1a8ff064a558de9798f0e109df26343ca0e0a9363a1a6cc90b4cbb82e9d9e4df5df08ae
SSDEEP

786432:i4UdMX89Tw0xvBNKxsk9gRE29HIhgMgREVuG7Ie7noUc:3EcCTHMsk9U1HIWMgRwuknoUc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Stub.exe

Files

Stub.exe
.exe windows:4 windows x64 arch:x64

02549ff92b49cce693542fc9afb10102

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

malloc
memset
_get_pgmptr
getenv
sprintf
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit

kernel32

Sleep
CreateProcessA
SetUnhandledExceptionFilter

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29.7MB - Virtual size: 29.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ