b4ad2e3ceb4758e122a8df583c368532 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4ad2e3ceb4758e122a8df583c368532
Size

8KB
MD5

b4ad2e3ceb4758e122a8df583c368532
SHA1

5e2a3f446d7e8284df30d5c3090ce77e5f8bbc4f
SHA256

11a2c5ac3a05abef16b65672d6ab01ad584a73a8f11af612dd4d87def6d78a33
SHA512

27cb146d03bbc5d8da5e9ffb3653abd3eb1c34e18ef1127d45f155cd8398ff977e60c0e48e5cf6aed736d4f00ced1dd1f93e6abaf9710ff8b9fa917858390b50
SSDEEP

192:n3GSMPYAJ+M5KxiUwPzCeYdJ/4AMefY3:n3GSMDMxiUYueYjgsQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4ad2e3ceb4758e122a8df583c368532

Files

b4ad2e3ceb4758e122a8df583c368532
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Jota_\source\repos\Hollow-extra\Hollow-extra\obj\x64\Release\Hollow-extra.pdb

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ