a426448c4ad836cd1f6e9a0abe899fad | Triage

Sharing

General

Target

a426448c4ad836cd1f6e9a0abe899fad
Size

211KB
MD5

a426448c4ad836cd1f6e9a0abe899fad
SHA1

316d70584dff373ba808c2037b1583b78eb19b65
SHA256

49512f8048d74cd6348f366c734a6bc50d20133dea7e0270ddeec00b2a60d650
SHA512

52da9e189e02d089f3844ca6abc7ee7ce8a910916c7e5635795b331492680656df0f77e648007b7287c5b19db1ba0bdcd602eb709fe71c050c1d2a2e4ab2d35f
SSDEEP

6144:Xlld9n2QpmM5MKI8JFSSvAM5SyFLzjg6MrZMAG:XXNMF8JFSS7Sy9OZMD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a426448c4ad836cd1f6e9a0abe899fad

Files

a426448c4ad836cd1f6e9a0abe899fad
.exe windows:4 windows

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Documents\Visual Studio 2010\Projects\God\God\obj\x86\Release\God.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 145B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ