C4PLoadnv[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

C4PLoadnv.exe
Size

1.1MB
MD5

b5a9076d54826a438364e593e5bdf7c0
SHA1

d099b7ff975b70060afe45ed04163f774d84cef3
SHA256

f6faa7ab7036cc0c5f6df43c6879217976965db5399ee17ed53a7cf756b7ef81
SHA512

1f52b63e1104db4f26a6952ef1b62e832d2867d28fce66275f5a4805cbc53a92f21f3da546236974bafbedeb5e4a6ce1290a17cf1240b047bb5cae08a982ab8e
SSDEEP

24576:OPQdyOV3Jdc/ckPYbJtfff3RIuPD5mM/reOJRMT0VAB:OQtV3Jq/ckQbJVffPkuqOJdV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
C4PLoadnv.exe

Files

C4PLoadnv.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ