b572673bd3a5d2bcf81b8742e3cd0941 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b572673bd3a5d2bcf81b8742e3cd0941
Size

922KB
MD5

b572673bd3a5d2bcf81b8742e3cd0941
SHA1

d2528da53bdb05793faa568b6b78dcc23c790258
SHA256

e95f353ed8a06ad2101f8d1bfb8e165ba05e6054ce687b6b15d71101e345acae
SHA512

4b92c04af5c567f8433be52919dffc995eb98d69b26db744c9e54e4107da2690ee3de6c5e540d46bd0bf60edbb3e13a93b480af817c626c2f055b041a625609a
SSDEEP

12288:e5PnICR9P8OyLN0KKfkmk25PnICR9P8OyLN:e5PnICv0O/KK/k25PnICv0O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b572673bd3a5d2bcf81b8742e3cd0941

Files

b572673bd3a5d2bcf81b8742e3cd0941
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Sinan\Desktop\Projecte\WrUndCo Crew Injector\WrUndCo Crew Injector\obj\x86\Debug\WrUndCo Crew Injector.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 496KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 424KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ