2bc3168e688b18f351775fe890d8f6b63c712cc2c1fc6d9453910e9b30b1d073 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bc3168e688b18f351775fe890d8f6b63c712cc2c1fc6d9453910e9b30b1d073
Size

794KB
MD5

91602191db2530b256ff26140ad90164
SHA1

d577a53505ed75d3b7f0f10d0a46351a33b2937c
SHA256

2bc3168e688b18f351775fe890d8f6b63c712cc2c1fc6d9453910e9b30b1d073
SHA512

f8ed614ba2bf51610dc8743c8649c0ce1834cebda6011b31717949c0aab02ec5a66344e8962aabf21cc32bf9d101992d24a45d4375829a9eb7509192f5e2274e
SSDEEP

6144:w9t1m9t1m9t1m9t1m9t1m9t1m9t1m9t1m9t1m9t1m9t1m9t1m9t1m9t1m9t1m9tl:qIIIIIIIIIIIIIIIIIIIIIIIIIII

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bc3168e688b18f351775fe890d8f6b63c712cc2c1fc6d9453910e9b30b1d073

Files

2bc3168e688b18f351775fe890d8f6b63c712cc2c1fc6d9453910e9b30b1d073
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\again\SharpDevelop Projects\RInjector\Virus.win32RozbehStrike\obj\Debug\Nominatus_ToxicBattery.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ