dropper_cs_ps_v4[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dropper_cs_ps_v4.exe
Size

14KB
MD5

ae3236ae773da6e4cbea00b18e4a1afd
SHA1

6ceb6b3efe2a08ef13c608b7d30d068643dd4dd1
SHA256

ca9bdc4b38803b210ccba6e468b1a8c92cb58562d689a849efa31064ba7b750f
SHA512

b5b159d787a2d71295f03d35a8c409aa4aa2866f62a79edc4221b8c7471d1bb5fc2fd35bfdb5fc2698f2b3ae47b4ea8e4ece2f855a843bf5070efac4dceefd20
SSDEEP

192:ZHMKTizojshdV47u3IEjufcW/6Pkrc2+gTZsno319VOcOsaDBg9qD+F:ZHHnshdVFr6vT9Zsno31u9saNPw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dropper_cs_ps_v4.exe

Files

dropper_cs_ps_v4.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ