7413b3ed6002eb0aa53c5a76bde14541620bc2e45daa8b71b7ba331caafc8f0dN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7413b3ed6002eb0aa53c5a76bde14541620bc2e45daa8b71b7ba331caafc8f0dN
Size

5.3MB
MD5

84bbc45c94177f569b7093f1ab1f2ea0
SHA1

0791953caa01e56d2acc22bbee8e0db028358416
SHA256

7413b3ed6002eb0aa53c5a76bde14541620bc2e45daa8b71b7ba331caafc8f0d
SHA512

e7aef888afd571bb906ce8784b1a8fbe0642c361e80dc161f34dbfff0373f923e0c6acd83b1ab23a9bc7ae85fe846251088eaa128436d3c189d6149aa1f911a8
SSDEEP

24576:qIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIG:aFO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7413b3ed6002eb0aa53c5a76bde14541620bc2e45daa8b71b7ba331caafc8f0dN

Files

7413b3ed6002eb0aa53c5a76bde14541620bc2e45daa8b71b7ba331caafc8f0dN
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\again\SharpDevelop Projects\RInjector\Virus.win32RozbehStrike\obj\Debug\Nominatus_ToxicBattery.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ