bf75903f573874881a3b569b112a107e8f15f7a301612c5772a6a31dbb1e638aN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf75903f573874881a3b569b112a107e8f15f7a301612c5772a6a31dbb1e638aN
Size

975KB
MD5

5a3d794ba93feb4d53c7d38ebed52fd0
SHA1

b2a8e0e7515e3a140d9fa46a81427dd524d3b851
SHA256

bf75903f573874881a3b569b112a107e8f15f7a301612c5772a6a31dbb1e638a
SHA512

63ce1f263d2889516e714f80a82050c9dafc3853c1bd336851bdfd156a67d8861cef91d0c6f95d95604e2c292b9cac42315a31f092838caa0abbd58a4f88006e
SSDEEP

1536:dEB9tBykrjEB9tBykrjEB9tBykrjEB9tB:WB9t0kr4B9t0kr4B9t0kr4B9t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf75903f573874881a3b569b112a107e8f15f7a301612c5772a6a31dbb1e638aN

Files

bf75903f573874881a3b569b112a107e8f15f7a301612c5772a6a31dbb1e638aN
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\again\SharpDevelop Projects\RInjector\Virus.win32RozbehStrike\obj\Debug\Nominatus_ToxicBattery.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ