a36d946de64fa2587d8cff8d3bf947e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a36d946de64fa2587d8cff8d3bf947e3
Size

131KB
MD5

a36d946de64fa2587d8cff8d3bf947e3
SHA1

12a197cafa3567e1981d3c312b964379a322b611
SHA256

4e06c8f374f7f227a41a312ea2ae7659d7a4f28469c2826e2aa8308868775468
SHA512

e804ac778fdbe22a992a70166cc221f688d9de88014af1c2ec3442b67ddfab0829be6ead6635368ac9b37a3949f5b13358c1293941ff05e00b16dbf9665bd61d
SSDEEP

3072:/hkZghN+NYNxgEReSZIrlCVKrcDLBHTLfAORUZtvK:5kY4gD1TB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a36d946de64fa2587d8cff8d3bf947e3

Files

a36d946de64fa2587d8cff8d3bf947e3
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Jovan\My Documents\My Music\Nyc\StubPredator4.0boy\StubPredator4.0\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ