a1687c79381e8c71d8d95b35a9fdd501 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1687c79381e8c71d8d95b35a9fdd501
Size

526KB
MD5

a1687c79381e8c71d8d95b35a9fdd501
SHA1

4fe0bd88ade6d7259a9606219fa14aba11291a4b
SHA256

e65b3f137f80c2301a31c7b1bb19afae0975b623fefec26f61951c11dda6976a
SHA512

3661e292881821bb01d15686053c7726c7ebac558fc6c95fbde2758688687ad62afa8aa9f7189ca43f6ebe24231dd0ad8d85ff3405d6d3117a81098c8147597c
SSDEEP

6144:8dqL5wZFiJhfdfGCBDZ4Yl7cVE2LlMomM9/CiuB:xJhZGGT1cVvLf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1687c79381e8c71d8d95b35a9fdd501

Files

a1687c79381e8c71d8d95b35a9fdd501
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Xp\Belgelerim\Visual Studio 2008\Projects\MewtaZaKKon\MewtaZaKKon\obj\Debug\MewtaZaKKon.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ