b66dc1b5114b06bddf1ef4fe22fd33de | Triage

Sharing

General

Target

b66dc1b5114b06bddf1ef4fe22fd33de
Size

80KB
MD5

b66dc1b5114b06bddf1ef4fe22fd33de
SHA1

bd9c4d9a266356e390195130ca75559e6f46df16
SHA256

d1d7d730f4e64b08364f00dacd20db895890636a58bc5ebf93db851f76e3c3e3
SHA512

c875f87767d3830f6fbbfd50a1596b55954e262799af3a23f8f8a8cfa6e83bfb4519737659612e05c321ccfa92cbd96c56bcf187d32ceb4c8851fc3895f85136
SSDEEP

1536:Ik3W9PtnnJMv2oHjkzj3IAcpSAZxl6pT9:IkQrCfOj3WSyiT9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b66dc1b5114b06bddf1ef4fe22fd33de

Files

b66dc1b5114b06bddf1ef4fe22fd33de
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Surse\N0$crypter_AeonHack\No Admin\wmpnetvk\wmpnetvk\obj\x86\Release\wmpnetvk.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 137B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ