17323410654ba047ce7c5797dc32293f05843ac92549fe6f348274a47d928019d0a4e85853103[.]dat-decoded[.]exe | Triage

Sharing

General

Target

17323410654ba047ce7c5797dc32293f05843ac92549fe6f348274a47d928019d0a4e85853103.dat-decoded.exe
Size

149KB
MD5

28a2d26c4a1bddce322390158ed4ed09
SHA1

5ce8a1fa88377290be9de1d8a5e5bdb757e91ab5
SHA256

6d037c00c6903f7757dbd5988e94beabc339efb5a6842073a344e3c96524d553
SHA512

84a795425968275b28ce6cdc92547ef6813ec4e26427eb4bfc5ab3bb6c23b7e9dc73874cc8db4fbe383db7582f8eb157d5f67ecdc3886eddd414f06cc932b8cf
SSDEEP

3072:/gSrM/6it0GX9EZ9gzkFaADPICPUs/A6uD5:VM/Xt0GXGgdAMLsul

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17323410654ba047ce7c5797dc32293f05843ac92549fe6f348274a47d928019d0a4e85853103.dat-decoded.exe

Files

17323410654ba047ce7c5797dc32293f05843ac92549fe6f348274a47d928019d0a4e85853103.dat-decoded.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\kazombalo\Desktop\sorce cyberbot add by blue worm saher sorcefinal add spreads desktop\Server\obj\x86\Debug\Stubd.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ