add675ff0d6aeabf618c8f1250f55a29db676d004ee3583a34fd4fd82ecead90 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

add675ff0d6aeabf618c8f1250f55a29db676d004ee3583a34fd4fd82ecead90
Size

792KB
MD5

cd8969f549a3e675afa0bfd786965c61
SHA1

25e9f3cdadc7c5c8f08cb8bb647dda54ce9f7997
SHA256

add675ff0d6aeabf618c8f1250f55a29db676d004ee3583a34fd4fd82ecead90
SHA512

ae7b0c204665acfaf08841c9adf9bfacc8f3e5b2d25fe2cac371479bbfdbafac3b1efb0174f98da85f6090c19f8f7afe5cbb75504908eb68558003a126828423
SSDEEP

12288:ew+aefZumiXlRtigIw2BNLCXqRQtHdqrt218q72dY8lfP7r9r/+pppppppppppp9:ePa6u/ZKCcmdqw6S2dRf1q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
add675ff0d6aeabf618c8f1250f55a29db676d004ee3583a34fd4fd82ecead90

Files

add675ff0d6aeabf618c8f1250f55a29db676d004ee3583a34fd4fd82ecead90
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\_RU\29.1.2024\WaggerApp\obj\Debug\WaggerApp.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 579KB - Virtual size: 579KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ