978c50bb8fdd654c854ba58e93da6b8b | Triage

Sharing

General

Target

978c50bb8fdd654c854ba58e93da6b8b
Size

18KB
MD5

978c50bb8fdd654c854ba58e93da6b8b
SHA1

1d76fbf299d42782ba8a7047031e8305f565d1aa
SHA256

b453f9b6e577159a4cf3b9d19696e1d91c1632d28b2d11092b847c938a0f40c3
SHA512

1a14860328e19c6e83aed29de45730dc2ba129497e33fa1f1c9e98ff042e93ff484b2933bcbcbafb23ec52307e78fdace3fbc07889e70ef460f696cd47163985
SSDEEP

384:vGo8J/c0VwrBKNxk8Lf45fxdf18u5MSE+4PL:OTJ/c0V4BaxnKI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
978c50bb8fdd654c854ba58e93da6b8b

Files

978c50bb8fdd654c854ba58e93da6b8b
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Pc\documents\visual studio 2010\Projects\RuPeFUD\RuPeFUD\obj\x86\Release\RuPeFUD.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ