95a69f3244c58b9dc99b42308df80acf406bd0eae071f30ef80036ba3ec2d420 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95a69f3244c58b9dc99b42308df80acf406bd0eae071f30ef80036ba3ec2d420
Size

42KB
MD5

91d221c7b79783809abe0acebc4c4c7b
SHA1

ffd6a6af3b898c0658b479648dd59b18c9e4d3e0
SHA256

95a69f3244c58b9dc99b42308df80acf406bd0eae071f30ef80036ba3ec2d420
SHA512

7b8b81927ba925cba6132e18706a9cec8c6961de5c8d7b52197d306446dbe957ca7c56e407297e775e96e11c8aed639106b4f21e74c725b44da65d55d8f8288d
SSDEEP

768:t9r8vm0w2Fsd1ePBJVvz0X+8hgzuhjZd6XhkhGhDY6r1dQrLhx56ZVzpQYcpA8SC:tavxw2PJ6Xh6CBnwiAhY6r1dQrL/56ZS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95a69f3244c58b9dc99b42308df80acf406bd0eae071f30ef80036ba3ec2d420

Files

95a69f3244c58b9dc99b42308df80acf406bd0eae071f30ef80036ba3ec2d420
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\huggye\Documents\Visual Studio 2013\Projects\Blue Botnet\Blue Botnet\obj\Debug\file.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ