8667be32ca4053a2c8b2c7fd2df11f8def322d8c6f0a039766961516e52a3a4f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8667be32ca4053a2c8b2c7fd2df11f8def322d8c6f0a039766961516e52a3a4f
Size

948KB
MD5

7e5d7d178c29a0d503c0d848a86a27c9
SHA1

9bea8c27bf754df0ef9c5d9c3545b62d0061bc3d
SHA256

8667be32ca4053a2c8b2c7fd2df11f8def322d8c6f0a039766961516e52a3a4f
SHA512

8394d2c45dd50e7b05b9dde7b59e5aaced264291526dfb0efd7f7d9e444294042415d2ba912f3a6ad9dc4f7f5ca20234a6c4b17158914d3264f939779935af66
SSDEEP

12288:/7p81cwVijj/Ajj/ujj/ujj/1oyt/Jsgm5J3xIjj/:Jbjj/Ajj/ujj/ujj/20zCJ3xIjj/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8667be32ca4053a2c8b2c7fd2df11f8def322d8c6f0a039766961516e52a3a4f

Files

8667be32ca4053a2c8b2c7fd2df11f8def322d8c6f0a039766961516e52a3a4f
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Eddie Valentine\source\repos\sfConfig Updater (EA)\bin\Release\obfuscated\sfConfig Updater.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 879KB - Virtual size: 878KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ