9b057a1a962cbd14cc9cd2243525d3bf | Triage

Sharing

General

Target

9b057a1a962cbd14cc9cd2243525d3bf
Size

1.3MB
MD5

9b057a1a962cbd14cc9cd2243525d3bf
SHA1

dea9c45fafa3bfd3b8c9dfa63958b3896d0f5773
SHA256

42d116a8708b11e0c457361674e92d9dcad99ee680e69ddd44e0c1b7798f60cf
SHA512

07ffb3a616dc63673065b4d8c95a5c27d20ce90ce55312a403d75d38a7ca80eefc72707cd5dc541b64c7b40e64993a607532ce963ff8db888addcf1bbd75469c
SSDEEP

12288:opU9b5pYXaiDT93Y3GliEB+VF1R89Q9Xxr/v/tF0ZS/iGDnl724MIc5JOa0EFmDi:Z9b43B3laV1n7qeryMsRVWQf7QTBztcX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

9b057a1a962cbd14cc9cd2243525d3bf

Files

9b057a1a962cbd14cc9cd2243525d3bf
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Roshan\Documents\Visual Studio 2010\Projects\ChrmStub4.4\ChrmStub4.4\obj\x86\Debug\ChrmStub4.4.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ