ac218bd2c92835532f50aada2f7c88f2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac218bd2c92835532f50aada2f7c88f2
Size

93KB
MD5

ac218bd2c92835532f50aada2f7c88f2
SHA1

28aa87a3e20c844ed9fa10b67ef5899848b2f578
SHA256

f5ad2157779da5094f061101e3fdf5a8be0aa6cd63ebd2c9142ab0e0f28ffe51
SHA512

4f36c628c9ccc6ac7a5b9d69f437cdef9e27873d2a09a45167d3e894a461a07b0ff2ac6e8a6ec26acda7fd1b7d8d22173b745e0e9c21c99ee36a5a72d629b2c2
SSDEEP

1536:uSnONpgSFoFPPYHZIb5a4fGprzTdx25bjUk0uPAuMoPez39uFz3Z:zUqTFPPY54XGRzTdWDTApCE3w1Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac218bd2c92835532f50aada2f7c88f2

Files

ac218bd2c92835532f50aada2f7c88f2
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

/home/Bossnetwork/Builds/main/src/BossBotnet.Client/obj/Debug/netcoreapp3.1/win-x86/System32.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ