b792878e2db6779a1b36eccccea12828 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b792878e2db6779a1b36eccccea12828
Size

26KB
MD5

b792878e2db6779a1b36eccccea12828
SHA1

ccd4825839db537b7cd75c4d40abfff2afd09f57
SHA256

320bc6b4a574e7e6ca315bc037b75ca133880a708ce10fbecaaf1b84a7cf2a43
SHA512

e4a876caf780b0b9ec16ebe9cd16d10be5a769e3900d9cf1ee492dfc9d1e9f9f69cb90e0490073a32d9dc39f7ed7a29f19e92bde111893c60656066cd5d92870
SSDEEP

384:i0bdlrlLRwqfjM73ogZoBGTGGcxtkSvDBb1Likiv1Dfohu4n83uxyf7F/rbJfYuW:i8Prl1w243o4TGztBBcau4vkbPFO1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b792878e2db6779a1b36eccccea12828

Files

b792878e2db6779a1b36eccccea12828
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\franklin\AppData\Local\Temp\333-9e85-449c-8584-6e9bfbc259b4\obj\Debug\Harita.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ