7b7b1f54bd3926330e3a40a74293eed10cdc0f58d705e76e843377fa55ddbb8e | Triage

Sharing

General

Target

7b7b1f54bd3926330e3a40a74293eed10cdc0f58d705e76e843377fa55ddbb8e
Size

948KB
MD5

67a07cf163f5312f1bb8a7d05bedda40
SHA1

f2bfb39ef6899d25a785847952d1245368d61eb2
SHA256

7b7b1f54bd3926330e3a40a74293eed10cdc0f58d705e76e843377fa55ddbb8e
SHA512

ddcca2d3c668e332f915d0c7e8c86dc533d172d537417ca65472f14fcfdd56a16e93a3fb1770e5aceaa7e00460e664003976072de22c3a8b1cd78b97a554b746
SSDEEP

12288:b7p81cwVyjj/Ajj/ujj/ujj/1oyt/Jsgm5J3x/ijj/:Nbjj/Ajj/ujj/ujj/20zCJ3xajj/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b7b1f54bd3926330e3a40a74293eed10cdc0f58d705e76e843377fa55ddbb8e

Files

7b7b1f54bd3926330e3a40a74293eed10cdc0f58d705e76e843377fa55ddbb8e
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Eddie Valentine\source\repos\sfConfig Updater (EA)\bin\Release\obfuscated\sfConfig Updater.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 879KB - Virtual size: 879KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ