979c1c0eadae020f810cec55cb11f0c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

979c1c0eadae020f810cec55cb11f0c2
Size

725KB
MD5

979c1c0eadae020f810cec55cb11f0c2
SHA1

e02abb4f34aba109d028b241df51796d6aae637c
SHA256

a24bda54c948ffaa835375242ba77292ff98f95a1522fd7422d25ac13777ba78
SHA512

6af01979d463ce7140407a11f428d4efc318fe8494d80deb2065eb02a5bea4f81fc95255115132282c050c691570eb3940877fccabdabf8cda1b317e4c7a7ee4
SSDEEP

12288:m3SjVvLUXZ3kvPI+denef5+G9I1sQc2iNF2iNi4QissaMJcR/V:mieZ3kr1j1esId

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
979c1c0eadae020f810cec55cb11f0c2

Files

979c1c0eadae020f810cec55cb11f0c2
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Administrator\Desktop\Protect\QWER\DeviceCredentialDeployment\bin\Release\Secured\ExTypesRustIRpir.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 656KB - Virtual size: 655KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ