99f399ff28e389efbb138ab015db907e | Triage

Sharing

General

Target

99f399ff28e389efbb138ab015db907e
Size

590KB
MD5

99f399ff28e389efbb138ab015db907e
SHA1

cac30caddae59cc495a97fcf9a2cde9dc086dbea
SHA256

fc6dad82bee8b969f00e08f04d51b23e31c64d7174bc5941371f929a086d444b
SHA512

ff3d8325b21b8c9447cbc956059925f392cf64fdd464db66408092ed56be5b851454f6393def09a886f605817d3fc1817ec6d52d0cfa102752d689d184aed3f1
SSDEEP

12288:t5RUCQYd9obrC3tu+FjxPy1Hjj4DTEWl7TvLXnl7MJ:oYdK+cwRcaTf7FwJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99f399ff28e389efbb138ab015db907e

Files

99f399ff28e389efbb138ab015db907e
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\iKrypter\Service\Service\obj\x86\Debug\lolgiyij.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 107B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ