8bc2645b6fceb0183d2657895e219b0b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8bc2645b6fceb0183d2657895e219b0b
Size

13KB
MD5

8bc2645b6fceb0183d2657895e219b0b
SHA1

e0726a27c49961602d1364d25090b5935edcf811
SHA256

1958be00d79f6c9f0a618b2c38f8870f6739459fd8be9d48f384b13daa9de3a1
SHA512

40a6aa1533f81e5d33d5a6992d1a79f9d9c20ec83ddddc6cf29f8d44bf56e1d8c7fe12024766cc92602d2b8f837347c28ccacdc20902d3731cab51b642776713
SSDEEP

384:f/voaEML/LqPb4oL7LGLlj0fIpd8kEptYcFwVc03K:f/voqzg/Slj1pdNAtYcFwVc6K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bc2645b6fceb0183d2657895e219b0b

Files

8bc2645b6fceb0183d2657895e219b0b
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Oskar Iwaniak\source\repos\WindowsFormsApp171\obj\Debug\WindowsFormsApp171.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ