8aa1f10fb7f32c312ba868b26d1520cb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8aa1f10fb7f32c312ba868b26d1520cb
Size

19KB
MD5

8aa1f10fb7f32c312ba868b26d1520cb
SHA1

413da8fd74ccfb2e9ec27d229ecbb34bfab3e0f8
SHA256

a041e4ee55c8080fb74e9b9413a4198aed139c12a7d9fd70b732083f414caa55
SHA512

591b6d7df5fe3090c3aa8d81badb3200fc8d0cff10a4f1bcbc4b27435e33b9ebb80b1acbbb2f6d6037c1d38105df349b6c78321b65518b03d6b8a2db9724b7d7
SSDEEP

384:iPRlF7qzD3PfRTrA/ui8AWayJLk245Ya3X1oG+QU53F8Rs5WnF:iPzF7qHPfNiu9NYDL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8aa1f10fb7f32c312ba868b26d1520cb

Files

8aa1f10fb7f32c312ba868b26d1520cb
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\greg\AppData\Local\Temporary Projects\WindowsApplication1\obj\x86\Debug\WindowsApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 157B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ