96bbf5d80e17c6158beb8af523a20ff6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96bbf5d80e17c6158beb8af523a20ff6
Size

15KB
MD5

96bbf5d80e17c6158beb8af523a20ff6
SHA1

50d2122fef3c06da34411f7f6c26133ab50ca3a2
SHA256

c2a39512e9c39f3a03ffdf476a253075ba53dd5cc29ad6b78fb572ae22ea3ad6
SHA512

cbb13f339266989117b536c8a86ac45cf8f1e19501d71c56a09cd1b5bec16159e3e8b8f770d427b4b002a82e53cb71f4737af9352bd4cc43501e3d6483df92d0
SSDEEP

192:DvP96k9KbNOJW8bnKhNEGN4RKtBU0nZmCLKnloYU45uJtIhflVwv8AqgA2:DvP96uKbQbn2EKPNZBLf45aQfle8Pj2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96bbf5d80e17c6158beb8af523a20ff6

Files

96bbf5d80e17c6158beb8af523a20ff6
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\FEDERIKO\Documents\Visual Studio 2008\Projects\stub-binder\stub-binder\obj\Release\stub-binder.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ