a0d8cebb02ad31baeb3f3c40f8857ccb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0d8cebb02ad31baeb3f3c40f8857ccb
Size

9.0MB
MD5

a0d8cebb02ad31baeb3f3c40f8857ccb
SHA1

290aadc1a127cebfb654538c0870a59a0061f5b5
SHA256

fbe16d946c227132a9aa5b645e3f78e008b024edab76d8457bd9749a2210bdf0
SHA512

48ac71582b9590ba5a15618776edfed125f4fdceca48d20cb18b8b5041177e625f74f7cf94e4581df5ba132d5c077ed844ca06a8d67d99e139453e6a58c00c0b
SSDEEP

196608:rfgk30RUEXY5YZUFI2b8sx4gSWAeKbTwpZvP7A23henHJI/Hnr:rfvEXkJIPpTWAeVvA23YH6/Hr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0d8cebb02ad31baeb3f3c40f8857ccb

Files

a0d8cebb02ad31baeb3f3c40f8857ccb
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Çalışmalar\Visual Studio\CG_Loader\CG_Loader\obj\x86\Release\CG_Loader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8.9MB - Virtual size: 8.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ