b4ed21a5b84b3aad240dc634c975691d | Triage

Sharing

General

Target

b4ed21a5b84b3aad240dc634c975691d
Size

448KB
MD5

b4ed21a5b84b3aad240dc634c975691d
SHA1

77a7d0b4ea437a2f8be889843c12023d0fede3d4
SHA256

53fd0737d1b3fa8ebf454c0b01c6b45b5765c216d028075bb0c52ba0c1855a84
SHA512

96a425df9c8e70a4cd34123a301b5fec24dde6d1ddd27f7a24ed718b3b291f8b1c22dffd5ae726705b9b53ee2b19157ed6967981b48e06ed41cf0a36c11bee12
SSDEEP

12288:1s7O8kZIcNp1qpFmYFZRrbhO04V3B+5zq+C6YE:1shgVzkPz/804CEtE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

b4ed21a5b84b3aad240dc634c975691d

Files

b4ed21a5b84b3aad240dc634c975691d
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Joshua aka Tarrib\File Binder\Stud\Stud\Stud\obj\x86\Debug\Stud.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 129B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ