abf3f4b3fcfcf14c8d6d734e1da8c98b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abf3f4b3fcfcf14c8d6d734e1da8c98b
Size

548KB
MD5

abf3f4b3fcfcf14c8d6d734e1da8c98b
SHA1

d78da7fcd8d8a7340a167085e1af0999fd0abec4
SHA256

f5d9274ebb8b0a73ee72387a10fa9a28bb25c7ca9c476fd87cbb72387ec8f2e6
SHA512

d596904e138c197a9020ddeb64268ebb3d8c03254646e18d45dcb98bde7e0bd399536ab7f6cd40de7193d3711f093c3006facca411c202e7bb1755329e1b7cf0
SSDEEP

6144:uLWOmofcqsh5CDdTQeSop2oWYmW6d9MVqLXPE+wHqwtN86pm9Qb+KlQHtxF/:jofcqsjCRR760VFFlGjF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abf3f4b3fcfcf14c8d6d734e1da8c98b

Files

abf3f4b3fcfcf14c8d6d734e1da8c98b
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

S:\Eplan_P8\KVP\skripte\Application\Application\obj\Debug\Application.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 546KB - Virtual size: 545KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ