a34899f4a43b3546efbfbcaf1d57a163 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a34899f4a43b3546efbfbcaf1d57a163
Size

7KB
MD5

a34899f4a43b3546efbfbcaf1d57a163
SHA1

879510da1bc55f920d27dae22dcd56e9e0a0c028
SHA256

deec46d9d91cb393556c8efa55176a3f3bdc85acaca18ef580e5e6d14b11f3ba
SHA512

9e3e74dfb11bad87accd4cd91f0b15ad2f7d8ba025c2704dd329f4c574577505127dd98b1bd82d6afbe7c34ae53133f25ce40cc4cec5034f59d844633a6b3820
SSDEEP

192:+sanOXTDnLsLHLqImTPdLBLkm/DgmSGAwp:+sanOXPLsLHLgTPdLBL3s1GAw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a34899f4a43b3546efbfbcaf1d57a163

Files

a34899f4a43b3546efbfbcaf1d57a163
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\user\Documents\Visual Studio 2012\Projects\WindowsFormsApplication7\WindowsFormsApplication7\obj\Debug\WindowsFormsApplication7.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ