446f14160483a01e2dc0b46e07e5502e3b53c8a0f50333672755264c1069e395 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

446f14160483a01e2dc0b46e07e5502e3b53c8a0f50333672755264c1069e395
Size

1.0MB
MD5

80a12f6bf7fc10a66864d1d1973257ea
SHA1

0bdb8b691e6bd09f289f1ff5482aa8e6aef2571c
SHA256

446f14160483a01e2dc0b46e07e5502e3b53c8a0f50333672755264c1069e395
SHA512

a027060d2c15972979fac7a1a9560660d0bcd558c18e2557b8480e3f876c8ff571bb49b4cb8ad5ab8f99577a55e127b06e5abb4715706d5c6a31f3bc2e75061a
SSDEEP

24576:QltF5TWrTZrtYbfcR2YfUpxrKl0XinWMCyFC:QltFd8bYbfs2XpklwinFw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
446f14160483a01e2dc0b46e07e5502e3b53c8a0f50333672755264c1069e395

Files

446f14160483a01e2dc0b46e07e5502e3b53c8a0f50333672755264c1069e395
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Desktop\Stubs\25\Window-Forms-Project-with-SQL-Database\obj\Debug\WindowsFormsApp1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ