Ben 6[.]exe | Triage

Sharing

General

Target

Ben 6.exe
Size

144.2MB
MD5

c4b670b04bf28805b021c3878e80d9d7
SHA1

7794dbb873db1ddf5e92f851ec5b289e3883e242
SHA256

9cc4e2aa963fd89ef490c000dfed2cbe8635eae3c584bbadb14a939f2a775651
SHA512

444535d1db26bef75b30fe2b567fa479a1f977d3ace88fbda0b57a8e4047fc6c44e3e139c3bdef0e207c35cb2c8d0180140ef05398dc5e93da5b22c5e4b98a28
SSDEEP

3145728:nF676i4dKAgzYf01W167sYqA8c3sKcfcT/qDaha1d6/nU/jpz+:nFU6i4Ivv1Ws7d73sK+DEG6fU/jpz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ben 6.exe

Files

Ben 6.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Nayteegames\Documents\Visual Studio 2010\@ PRO\drowned\drowned\obj\x86\Release\drowned.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 144.2MB - Virtual size: 144.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ