ad8de22974f01f9286a2d0ecb0222de6 | Triage

Sharing

General

Target

ad8de22974f01f9286a2d0ecb0222de6
Size

43KB
MD5

ad8de22974f01f9286a2d0ecb0222de6
SHA1

d75aa62e6a4aa6e5467fbc21bc0fa2458c9668e3
SHA256

51621822af7700db555a6eec8f6a8b0d22a2823a6390b3dea1f0d3415bd53d06
SHA512

c10cef32aca7f40f120469b277b6ee32a085423c9348eb5501bcfb00b399f98578ac4409c953c47749b7350133bfb0c5586ac6093a897734c21dd75a8eceb754
SSDEEP

768:5CGbnSHaN72gOupPA1ayVz4r0cdPJxYGLVzuuGmG5LzLYAD1Jwko5tNKCq:59fu/VN8jYG5cmG9o4PAK1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad8de22974f01f9286a2d0ecb0222de6

Files

ad8de22974f01f9286a2d0ecb0222de6
.exe .js windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Leonardo\Documents\cAlgo\cTrader GURU\Bifrost\Bifrost\obj\Debug\Bifrost.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ