01599bc8927b6845c2552753e208c560d189c0dcf657ee5ac0dbe8c1e3362ca1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01599bc8927b6845c2552753e208c560d189c0dcf657ee5ac0dbe8c1e3362ca1
Size

948KB
MD5

9fa5f2180b1aafb176dfca546163e39b
SHA1

449aef584f2db6a59c8953b5e010fb87ef56f8ef
SHA256

01599bc8927b6845c2552753e208c560d189c0dcf657ee5ac0dbe8c1e3362ca1
SHA512

977bad8fa579f779ab9c5c88fbc61f15b10378de03f4d45c7b4af60c06e09edc061b992ab41188cb35e398b3ead6ab08a072858de8c80fabe0424ef520f7b3ae
SSDEEP

12288:17p81cwVijj/Ajj/ujj/ujj/1oyt/Jsgm5J3x2jj/:Dbjj/Ajj/ujj/ujj/20zCJ3x2jj/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01599bc8927b6845c2552753e208c560d189c0dcf657ee5ac0dbe8c1e3362ca1

Files

01599bc8927b6845c2552753e208c560d189c0dcf657ee5ac0dbe8c1e3362ca1
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Eddie Valentine\source\repos\sfConfig Updater (EA)\bin\Release\obfuscated\sfConfig Updater.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 879KB - Virtual size: 878KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ