stub[.]exe | Triage

Sharing

General

Target

stub.exe
Size

98KB
MD5

bdfa5841c9e4eef468202a788c52dec2
SHA1

71756d583a44fb8ac91b20c2d973b91acadb9753
SHA256

1def3bf1a5e4da176b49943bfa039ff657d71b4d60aa6b1c9116484f73d0fc71
SHA512

2b92282c1338b5808e2a9bfa62a55a431d11cb98d5e5ea848c24fa209bd566402bfb323c3cd21083048d8a7efd55012e40bcf3c679f54f4f5a159ff98b7aa4c2
SSDEEP

1536:WuYbI6lmBJK9pGmDKdd5xy2zizytvJIWUIeEJ7DvRDaGeqCd8Ft6mUq:rYbI6yPdnxxieaWUrEd7Na6C+jUq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
stub.exe

Files

stub.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\owner\Downloads\Boron Crypter\source\stub\stub\obj\Debug\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ