b5758ed0d238ec430ce8eb988e2c16f3 | Triage

Sharing

General

Target

b5758ed0d238ec430ce8eb988e2c16f3
Size

8KB
MD5

b5758ed0d238ec430ce8eb988e2c16f3
SHA1

40003466b2254de9e1471a9a5576476547d91934
SHA256

6da73c3a5ef985ddd68d4de7d0a0a081bb980aa6affb720704868ef171f4580c
SHA512

5e5b221baf4548f75df39209a436e169f3bc0016f02e5d2a27abf7624bc4859ab0d28dcf24bc71af7f080a7616d54c6b51c3f06ba4591d052d7e568507776f2a
SSDEEP

192:fkmUPbPWwzj1tz2SEGlfH2XcVXBpy5b4Y:fkmUTPWwzj1tyS752XcVXBpy5E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5758ed0d238ec430ce8eb988e2c16f3

Files

b5758ed0d238ec430ce8eb988e2c16f3
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

F:\Projects\ElectricRed\ElectricRed\obj\Debug\netcoreapp3.1\ElectricRed.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ