8d3794ed7fa50c13b9bb1754b41b9939 | Triage

Sharing

General

Target

8d3794ed7fa50c13b9bb1754b41b9939
Size

21KB
MD5

8d3794ed7fa50c13b9bb1754b41b9939
SHA1

a2cf4f32ad19bf92f1881ae1e5479a9af8541568
SHA256

d1916824896c08f78264ae5d6a397664f23dbf8c47108add64a9ca1bf6f7d1f0
SHA512

f418b7cffc65fad839315d284dbf18ca80035f6237f638a68e287e5337e1a2a1558b46fed63354ab0fcc4a52e7a731ce6941515c7f10c2b01c92b6b28a5d8f6d
SSDEEP

384:t4jL0mMKrlp23XxNjWCOjO0PTqSh1R+xIWM9kKUJ5:t4jL0glMhlO2BIFkKm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d3794ed7fa50c13b9bb1754b41b9939

Files

8d3794ed7fa50c13b9bb1754b41b9939
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\ROGYNATOR\source\repos\ConsoleApp4\ConsoleApp4\obj\Release\ConsoleApp4.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ