9784471549b3ed915f96c58facf4d4d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9784471549b3ed915f96c58facf4d4d6
Size

8.2MB
MD5

9784471549b3ed915f96c58facf4d4d6
SHA1

3ba509548740dbf7d460bc1382e31aae0f420b8e
SHA256

87439c993928ff496def95016fc7903388ac032a249b6ec0112aee5367800579
SHA512

1adaf7d095dcd512ff876db8b0122e6c95e49420249a76a6e1ac6d4f4636f90c43f3a4ea7bde772e3c643512aad2727cc8a4e8530d6dc7c9e2e65bcaf30ca78a
SSDEEP

196608:bxYiFHG5Gzmw3hmI4ctDXWjOcTBTe+rFlbE7rFlY1cjor7I:5Gkzj3hmILdXTMle+rfA7nY1cMr7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9784471549b3ed915f96c58facf4d4d6

Files

9784471549b3ed915f96c58facf4d4d6
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Klaus\Documents\Source\GFAlarm\GFAlarm\obj\Release\GFAlarm.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8.0MB - Virtual size: 8.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ