b59c7903477c41816ba65179b8b04dbf | Triage

Sharing

General

Target

b59c7903477c41816ba65179b8b04dbf
Size

154KB
MD5

b59c7903477c41816ba65179b8b04dbf
SHA1

1f2e7a048808013abe6b74a086c4b24ba74ddf37
SHA256

629af1c0cd44722b5f51351a23c18bd4a22341529e1554613fe4b742382c4fa7
SHA512

c47e565619ffd27c7741b1d3f765a22ced4d63ab5544c899f0b9167fe6a4ba9145eb6be2d4a567486c8f85d52e07e4beabc79514aefc97e471093d9f0dcf1970
SSDEEP

3072:Cs4Vm1m7cRq4bUlxxyHDkMKmplC2TQiKAV6QktJ99k60ZbUc2U+K:87cRnbUlXkKmeAQXxQghU+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b59c7903477c41816ba65179b8b04dbf

Files

b59c7903477c41816ba65179b8b04dbf
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\user\Documents\Visual Studio 2013\Projects\gzruler\gzruler\obj\Debug\gzruler.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ