cbeb4a658bf6f552b52005dd162d13d5fb8f8a4087093b33e165067c5c7d14b8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cbeb4a658bf6f552b52005dd162d13d5fb8f8a4087093b33e165067c5c7d14b8
Size

59.5MB
MD5

8698f449a876458200e47553dfb1aa8c
SHA1

cd12da0473450219173fd6107fd4fba03932f019
SHA256

cbeb4a658bf6f552b52005dd162d13d5fb8f8a4087093b33e165067c5c7d14b8
SHA512

a77bc57b9484ac78f14044b7323f79bce97daa2d0e4d635cde6308d27a2346f3eaf7eb0ca2446ad621cdff24670ab7db22e9525501f10def5bcfc448365fafea
SSDEEP

786432:KjrwwiCgSxLMKp6MDku56vb0grZN0TpXUF:ZWq0zTpkF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbeb4a658bf6f552b52005dd162d13d5fb8f8a4087093b33e165067c5c7d14b8

Files

cbeb4a658bf6f552b52005dd162d13d5fb8f8a4087093b33e165067c5c7d14b8
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Administrator\Desktop\PBinstaller\installer\AppeonInstaller.Update\obj\Release\net6.0-windows\win-x86\InstallerUpdate.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ