a77ed6c7618f64bb266bdc70c1e89988840fa62ae236a632310a61588fad6b5eN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a77ed6c7618f64bb266bdc70c1e89988840fa62ae236a632310a61588fad6b5eN
Size

903KB
MD5

fdd2aa6a8f1c737641342b04847896f0
SHA1

f6c022f0054b0d379a92639fbb3dcd7af7654413
SHA256

a77ed6c7618f64bb266bdc70c1e89988840fa62ae236a632310a61588fad6b5e
SHA512

63e91ff51183513513d7844cc85c1711eedd8cf9749e41bd99451bf05e885ea24c5a7eb120ea10817318ee089d41a12a58413517cd99b9be2fc23948b9514733
SSDEEP

3072:WB9t0kr4B9t0kr4B9t0kr4B9t0kr4B9t0kr4B9t:w9t1m9t1m9t1m9t1m9t1m9t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a77ed6c7618f64bb266bdc70c1e89988840fa62ae236a632310a61588fad6b5eN

Files

a77ed6c7618f64bb266bdc70c1e89988840fa62ae236a632310a61588fad6b5eN
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\again\SharpDevelop Projects\RInjector\Virus.win32RozbehStrike\obj\Debug\Nominatus_ToxicBattery.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ