7fcf0f2babeed4a371965503b48ec2e4 | Triage

Sharing

General

Target

7fcf0f2babeed4a371965503b48ec2e4
Size

158KB
MD5

7fcf0f2babeed4a371965503b48ec2e4
SHA1

835960f0df6a84778030e57494edf7748fec9988
SHA256

3a393b7b07fcc1ce531e2dab63f8f6d94461d8c3121b268770badca747870dff
SHA512

566ff7fb26e0e0c8952c76be9d7443486631b3d7c3b86254e55aae4b201c777ab8ff1df48688cbd5b6c13de2aa8da3a9e0a76ada9e61a7a39d317dbedcca2fb8
SSDEEP

1536:HgKnyEsyxfipEsyxfipEsyxfipEsyxfipEsyxfiKgKny:H9yEsmOEsmOEsmOEsmOEsm99y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7fcf0f2babeed4a371965503b48ec2e4

Files

7fcf0f2babeed4a371965503b48ec2e4
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

k:\Joe Security\projects\Joebox\publicsvn\trunk\src\windows\usermode\unarchiver\unarchiver\obj\Debug\unarchiver.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ