839e756edb5210ce14c6608fbb0a7a6ddf7609b4d02bc301d76958b7844a4a90 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

839e756edb5210ce14c6608fbb0a7a6ddf7609b4d02bc301d76958b7844a4a90
Size

42KB
MD5

107d96e7d8c5688d642cb1c67955a26c
SHA1

96b9a5396de6135584e72188332bacbb6258c2d8
SHA256

839e756edb5210ce14c6608fbb0a7a6ddf7609b4d02bc301d76958b7844a4a90
SHA512

f60e64c3ec97ef3b7403fa24364b94cd298049d99bdf4cb974fdc2ea6f426eaf766ebfb95e5986227a3579622d6e81d7236f4315e23b433d3bcfa3df1c3f595d
SSDEEP

768:t9r8vm0w2Fsd1eKBJVvz0X+8hgzuhjZd6XhkhGhDY6r1dQrLhx56ZVzpQYcpA8SC:tavxw2+J6Xh6CBnwiAhY6r1dQrL/56ZS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
839e756edb5210ce14c6608fbb0a7a6ddf7609b4d02bc301d76958b7844a4a90

Files

839e756edb5210ce14c6608fbb0a7a6ddf7609b4d02bc301d76958b7844a4a90
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\huggye\Documents\Visual Studio 2013\Projects\Blue Botnet\Blue Botnet\obj\Debug\file.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ