ibazel_windows_amd64[.]exe

General

Target
ibazel_windows_amd64.exe
Size 8.1MB
Sample261102-tagtxafe82
SHA256 5be92e134bc3ee255e1918ce96ea161fcc3b308e8e79b660ab5f9b0900c178ae
MD5 d9ef403e5d32dd221375f5fd429067b9
SHA1 d6e89f52cb73666a5af54447b857603989314267
SHA512 ff64db9825f3d996d2c4b751d214c00e7136c3ca0dce2ac50310700eaef3cc49ec28ff05427d6c0d48307bcca3c430a44a719e1ff11ea8e752d4817e0beb5229
SSDEEP 49152:7uwnECQ+bpi1sC+U+dRVITT0cUc7iJFZsAc9Djq6WUe1y0XsnVFiA7JjM5EOH/r9:yca+RzE5qy0Xo4E8j6OBR6LgOSj
TLSH
T11E862847E8A509E8C0EEC17585269257BB71BC494F3573DB2B60F7282F76BD0AA79300
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ibazel_windows_amd64.exe

File Explorer

ibazel_windows_amd64.exe

.exe 8.1MB

ibazel_windows_amd64.exe

IMPHASH d42595b695fc008ef2c56aabd8efd68e
SHA256 5be92e134bc3ee255e1918ce96ea161fcc3b308e8e79b660ab5f9b0900c178ae
MD5 d9ef403e5d32dd221375f5fd429067b9
SHA1 d6e89f52cb73666a5af54447b857603989314267
SHA512 ff64db9825f3d996d2c4b751d214c00e7136c3ca0dce2ac50310700eaef3cc49ec28ff05427d6c0d48307bcca3c430a44a719e1ff11ea8e752d4817e0beb5229
SSDEEP 49152:7uwnECQ+bpi1sC+U+dRVITT0cUc7iJFZsAc9Djq6WUe1y0XsnVFiA7JjM5EOH/r9:yca+RzE5qy0Xo4E8j6OBR6LgOSj
TLSH
T11E862847E8A509E8C0EEC17585269257BB71BC494F3573DB2B60F7282F76BD0AA79300
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

478176

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

3.7MB

Virtual Size

3.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4.0MB

Virtual Size

4.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

334KB

Virtual Size

650KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

93KB

Virtual Size

92KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.symtab

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

ibazel_windows_amd64.exe

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

ibazel_windows_amd64.exe

kernel32

generic