980b5b860e11384e16c18cc62410d5dc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

980b5b860e11384e16c18cc62410d5dc
Size

186KB
MD5

980b5b860e11384e16c18cc62410d5dc
SHA1

18c8154d6687cbd323376bd80e6051dd4e7c7eec
SHA256

54c5de5873c6dd854e2d688865ffc7120be6a6e09d9a95dc11fb03f08d58bb27
SHA512

8830569cadd0f292fbcb74c2cd8aa06c96e892bab578a3a1014d4c21d658e3bc36bbf78fc2ee22c59270e7814718f9c323cb864b1657cded76751056b9813161
SSDEEP

3072:XKsjD0wqgesGbLOOWgswNH9/i4nBZEsc5xgzGreB+32GhNvPkNc0Z1bnnfWIr9Y:asjorPJaUq0Greq2GhNb0Tf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
980b5b860e11384e16c18cc62410d5dc

Files

980b5b860e11384e16c18cc62410d5dc
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\users\melijhonson\source\repos\WindowsFormsApp1\WindowsFormsApp1\obj\Debug\WindowsFormsApp1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ