click_me[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

click_me.exe
Size

36KB
MD5

9fa9393f950fe30e8be8976a49dc4e87
SHA1

7a157d565a01cac14e22a8126f5a56cf4185e82f
SHA256

344ebd0119f1b49a1dd897c4c57cd5b8254d13d398730c9881904bb099c3d81e
SHA512

3f3b4a779b73537d240f344af28aa5b267a4905dd7ae8d24c69e3eb35ae6754802cdffcef594ab9864ba97b634c1a4b06de567a8417ef927b364cc93c3378c2b
SSDEEP

768:z3JkhJteFb16S0LIa15GKoV4CaEt3F/fm+IYP5Bzfw:z6h3065r0fnm+9pfw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
click_me.exe

Files

click_me.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\umert\OneDrive\Masaüstü\Bibo Api\MarioStealsYourLiver\MarioStealsYourLiver\obj\Debug\MarioStealsYourLiver.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ