61c8f6f09fa94ba7387eb73656f829b6790b081279e198eb7083471ecadcf47f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61c8f6f09fa94ba7387eb73656f829b6790b081279e198eb7083471ecadcf47f
Size

943KB
MD5

b7c5d1ce0fcc7f929f2fb9fdf32c2234
SHA1

b64d993cab37424e2434898ba5bc51bd3f6438df
SHA256

61c8f6f09fa94ba7387eb73656f829b6790b081279e198eb7083471ecadcf47f
SHA512

0547ccccc555419cd0f7b0345fdd3115954c9fd3350f1a5525c99822bdda9ef1ff351e7cebc41acf95cdcb9607cd6532d41655ce701fa4f08f816795b42e4160
SSDEEP

12288:vjj/Ajj/ujj/ujj/1oyt/Jsgm5J3x1/jj/:vjj/Ajj/ujj/ujj/20zCJ3x1/jj/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61c8f6f09fa94ba7387eb73656f829b6790b081279e198eb7083471ecadcf47f

Files

61c8f6f09fa94ba7387eb73656f829b6790b081279e198eb7083471ecadcf47f
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Eddie Valentine\source\repos\sfConfig Updater (EA)\bin\Release\obfuscated\sfConfig Updater.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 874KB - Virtual size: 873KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ