8d9e4a42ed8c4f121a892ccaafe54209 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d9e4a42ed8c4f121a892ccaafe54209
Size

375KB
MD5

8d9e4a42ed8c4f121a892ccaafe54209
SHA1

966b8103652c20c3803bae7fbb47da3112a4e271
SHA256

68d7816685680cb6ea2c0ddaf19baac1481f4889e1655b3287290d8cb67936b2
SHA512

513e4cb88dadcd8890a687c4cfdb0159904a286e7dcee49a4e09e253b33d9fea0c6da4d999a0c7e231af35270d80aadeb34325898d3fc9bf2905625b98c48aca
SSDEEP

3072:AYLRQ43w/B907Q5QCq/yLBgojbbt5RfxQbTkC:nL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d9e4a42ed8c4f121a892ccaafe54209

Files

8d9e4a42ed8c4f121a892ccaafe54209
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\cyb3r-9\Documents\Visual Studio 2008\Projects\crybert\crybert\obj\Debug\crybert.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 370KB - Virtual size: 369KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 145B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ