c57cc1aa493abe0e3b2272267005c46707efef74f761cf9dbfcc58344555352b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c57cc1aa493abe0e3b2272267005c46707efef74f761cf9dbfcc58344555352b
Size

948KB
MD5

d873558f1117219fc74b9fb385e96ea9
SHA1

d40fd62ce793038f4a39a502eec7fe5ca07ce1cc
SHA256

c57cc1aa493abe0e3b2272267005c46707efef74f761cf9dbfcc58344555352b
SHA512

18bf5bc8938ec6cf39b0899429671a79db1b94dad3ee1a432364c9d3a2b0abc06c2398fd73279591f19096f3e6e5ede5682779eabf707571487a2c341ee417e2
SSDEEP

12288:67p81cwVijj/Ajj/ujj/ujj/1oyt/Jsgm5J3xvjj/:objj/Ajj/ujj/ujj/20zCJ3xvjj/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c57cc1aa493abe0e3b2272267005c46707efef74f761cf9dbfcc58344555352b

Files

c57cc1aa493abe0e3b2272267005c46707efef74f761cf9dbfcc58344555352b
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Eddie Valentine\source\repos\sfConfig Updater (EA)\bin\Release\obfuscated\sfConfig Updater.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 879KB - Virtual size: 878KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ