7f3500a79ed7a5e515b1ae9bcccede89 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f3500a79ed7a5e515b1ae9bcccede89
Size

44KB
MD5

7f3500a79ed7a5e515b1ae9bcccede89
SHA1

54753af2bb4680682c2af608d6ac2609b7bce04d
SHA256

30594f01ea14ad2632c3a5432a44c1dba1fa7b19ba3ce047e44c6b26caf3a689
SHA512

14d66d204d5f3ce0c59b46e94f921d80f97e5d73df2b70d0367d602acd2b37ba95a0ad2ae4e33c06d33d9ebde59b8060685944e36829569b00e17f112027ed6f
SSDEEP

768:uEekq2BMVMKUmjNlMCJ1tSBY97oCNwfS/6Pkue1MqqXl3HWqT2Oug+pM9SpE3esN:uEBq2aVMDmR5J7SBWNAS/6PkuSMDXtHZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f3500a79ed7a5e515b1ae9bcccede89

Files

7f3500a79ed7a5e515b1ae9bcccede89
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\James\Desktop\Source Codes and Projects\xStub\xStub\obj\Release\xStub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 135B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ