79839f5f0f9aae393a708b1e768f351e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79839f5f0f9aae393a708b1e768f351e
Size

5KB
MD5

79839f5f0f9aae393a708b1e768f351e
SHA1

6fb4b7b8fcfd4aa8299c810a2757da8946161c41
SHA256

eca16abead387b8ae91817c804368d36791f87d1d214d4b9df2a33d5c93d8fde
SHA512

1b874705a4073f0b1eaee76c3cc346ee58285c845840d2093b6c2552a71ddccea488b737e8e0d34a60e72752a9c9b163b22ec3054acf4c471f4f2bcd6a42d62c
SSDEEP

48:6mapq6VJWdcImScfTS22sNMrqfnjb9BFoutrtP03gZqHVuyGPlTNOnDXFrpfbNtm:4jJWlmTS22PiP+uNtM3gEmJNOn7zNt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79839f5f0f9aae393a708b1e768f351e

Files

79839f5f0f9aae393a708b1e768f351e
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\root\source\repos\CryStil\CryStil\obj\Debug\gasdhugi3rtwefxdgbertrd.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ