8c736f2fa989c2860c5a2ba862e52cb0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c736f2fa989c2860c5a2ba862e52cb0
Size

59KB
MD5

8c736f2fa989c2860c5a2ba862e52cb0
SHA1

515f09ebba4494de58be33f6330540e8c3d90f08
SHA256

3aba97d21cfe5f3f74a7d124d37cac652663e077ef4cc3cea619d570d71ae25e
SHA512

459047874b23552ad32efa666622bb72b282c7b638b95a30c4d9194775797eda9602dcbfa2082c9805b976f76de322ad03be01f532e1fd94d17e131479f7ab21
SSDEEP

768:IDAQqS9PmbgaraEFp8ywRihojJvNUnxxlG6WsK+KeYzThrBkXFhS:8AQq+ekaHp8yw8+vNyP9Knr/hrBkHS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c736f2fa989c2860c5a2ba862e52cb0

Files

8c736f2fa989c2860c5a2ba862e52cb0
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Sean\Desktop\Kryptos Source\Doctor Logger 4.1\stub\stub\obj\Release\stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ